Vanguard Group Inc. Data Breach
November 13, 2026 – Federman & Sherwood is investigating a data breach involving Vanguard Group Inc. that affected personal information associated with certain Vanguard clients.
According to its notification, Vanguard experienced a social engineering incident between July 29 and July 31, 2026. An unauthorized third party gained access to certain files within a limited set of cloud-based applications, including applications such as Microsoft 365. Some of those files contained clients’ personal information.
Vanguard stated that no client accounts were accessed and that it found no evidence of access to its recordkeeping system or any system capable of moving money. The company also reported no evidence of malicious software or ransomware associated with the incident.
The affected information varied by individual and may have included additional details associated with clients’ plans. The notification template provided for review does not identify the specific categories of personal information affected.
Vanguard stated that it contained the unauthorized activity, engaged third-party cybersecurity experts, and coordinated with law enforcement. The company is offering affected individuals three years of complimentary credit monitoring and identity protection services through Kroll.
The potentially affected information may include:
- Names
- Social Security numbers
- Financial information
- Other sensitive information
What is Vanguard Group Inc.?
The Vanguard Group, Inc. is a massive American investment management company that helps individuals, institutions, and financial advisors build wealth.
If you received a notification concerning this incident or believe your personal information may have been affected, contact Federman & Sherwood to discuss your potential legal options at 1-800-237-1277 or info@federmanlaw.com.