
Vanguard Group Inc. Data Breach - Federman & Sherwood
Federman & Sherwood is investigating a data breach at Vanguard Group Inc. that exposed personal information of certain clients between July 29-31, 2026.
According to its notification, Vanguard experienced a social engineering incident where an unauthorized third party gained access to certain files within cloud-based applications, including Microsoft 365. Some of these files contained clients' personal information.
Vanguard stated that no client accounts were accessed and that it found no evidence of access to its recordkeeping system or any system capable of moving money. The company also reported no evidence of malicious software or ransomware associated with the incident.
Affected Information
The potentially affected information may include names, Social Security numbers, financial information, and other sensitive details associated with clients' plans. The notification template does not identify specific categories of personal information affected.
Response Measures
Vanguard contained the unauthorized activity, engaged third-party cybersecurity experts, and coordinated with law enforcement. The company is offering affected individuals three years of complimentary credit monitoring and identity protection services through Kroll.
Vanguard Group is a massive American investment management company that helps individuals, institutions, and financial advisors build wealth. Those who received notification or believe their information may have been affected can contact Federman & Sherwood at 1-800-237-1277 or [email protected] to discuss potential legal options.