Vanguard Data Breach Affects 94 Vermont Residents; Law Firm Opens Class Action Investigation
National class action law firm Edelson Lechtzin LLP announced on November 10 that it has opened an investigation into a data breach at the Vanguard Group, offering free case evaluations to current and former investors who may have been affected.
Vanguard filed a breach notice with the Vermont attorney general on November 4, reporting that 94 Vermont residents were affected and that the exposed information included Social Security numbers. Public reports and a newly filed class action describe a much larger incident: threat actors allegedly claimed in mid-October 2026 to have breached Vanguard’s network servers and offered a database for sale on a dark web forum, and a cybersecurity firm reported that more than 14 million Vanguard-related records were being offered online. Vanguard has not confirmed those claims or said how many people nationwide were affected, and the cybersecurity firm also described the alleged breach as unverified.
The Vermont filing confirms Social Security numbers were among the exposed data; public reports and state documents indicate the records may also include full legal names and account data held in Vanguard’s systems, and, according to the cybersecurity firm, SMS verification records with timestamps, phone numbers, countries and carriers. The law firm advised investors to check account statements and credit reports, keep their breach notices, and request a free fraud alert or credit freeze from the three major credit bureaus.
Source: PR Newswire (Edelson Lechtzin LLP
Published by GSM · USA (original Chinese edition)
Photo: 佛蒙特州议会大厦（蒙彼利埃，2015年秋）。（Wikimedia Commons）
