Vanguard customers whose names and Social Security numbers may have been exposed in the data security incident Vanguard reported in November 2026 may be covered by a proposed class action alleging The Vanguard Group failed to protect their records. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes a class action complaint. The statements below are unproven allegations. The Vanguard Group, Inc. has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
The Vanguard Group, Inc., the Valley Forge, Pennsylvania investment company, has been sued in a proposed class action in Pennsylvania federal court that alleges it failed to protect the theft of 14 million customer records, according to Law360. Court records show new suits against The Vanguard Group filed in the U.S. District Court for the Eastern District of Pennsylvania on November 11, 2026 (Nos. 2:26-cv-08628 and 2:26-cv-08630); OpenClassActions.com has not yet read those complaints to confirm they all concern the breach. The claims are allegations; Vanguard has not answered them in court and no judge has ruled.Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Did Vanguard Report?
Vanguard reported a data security incident to the Vermont Attorney General on November 4, 2026. The state’s breach notice list records 94 Vermont residents affected and lists Social Security numbers as the type of data involved; the state notes that such counts can rise as companies identify more affected people. Vanguard’s notice letter is not posted publicly, so its description of the incident, the dates involved and any credit monitoring offered are not yet available here.In mid-October 2026, a threat actor claimed online to have stolen more than 14 million Vanguard records, including full legal names, Social Security numbers and account information. Vanguard has not publicly confirmed those claims or the 14 million figure.
What Does the Lawsuit Claim?
The complaint described by Law360 alleges that Vanguard did not adequately protect customer data against theft. Data breach complaints of this kind typically assert negligence and related claims and ask for damages, credit monitoring and court-ordered security improvements. Vanguard has not responded in court, and no court has found it liable. Several law firms have also announced investigations, which usually means more complaints may follow.Is This the Same as the Vanguard Website Tracking Case?
No. A separate, earlier class action in the Eastern District of Pennsylvania (No. 2:25-cv-02359) alleges that tracking tools on Vanguard’s website shared account holders’ data with third parties. In September 2026 the court trimmed but did not dismiss that case, according to Bloomberg Law. It concerns website tracking, not the November 2026 breach.What Happens Next?
If several breach suits are filed against Vanguard, they are likely to be combined before one judge with a consolidated complaint. Vanguard will then respond, often with a motion to dismiss. People whose information was involved should receive a breach notice from Vanguard describing what was exposed. Any payment would come only from a later settlement or judgment approved by the court.Questions
Did Vanguard confirm that 14 million records were stolen?
No. Vanguard reported a security incident involving Social Security numbers to the Vermont Attorney General on November 4, 2026, listing 94 Vermont residents. The 14 million figure comes from a threat actor’s claims and is repeated in the lawsuit; Vanguard has not confirmed it.
What information was involved in the Vanguard breach?
Vanguard’s Vermont filing lists Social Security numbers. The hacker claims and the lawsuit also describe names and account records. Vanguard’s notice letters to affected people are the best source for what was exposed for a given person.
Is the Vanguard breach lawsuit related to the Vanguard website tracking case?
No. The website tracking case, No. 2:25-cv-02359, was filed earlier over data shared through tracking tools on Vanguard’s website. The breach lawsuit concerns the November 2026 security incident.
Can I file a claim in the Vanguard data breach lawsuit?
No. The case is a proposed class action at the complaint stage. No class has been certified, there is no settlement and there is no claim form. A claim process exists only if the case settles or wins and a court approves notice to class members.
Sources
- Law360: Vanguard failed to protect 14M customer records, suit says
- Vermont Attorney General: security breach notices list (Vanguard Group, Inc., reported Nov. 4, 2026)
- Bloomberg Law: Vanguard can’t escape account holder suit over web data tracking (separate case)
- U.S. District Court for the Eastern District of Pennsylvania docket listings, Nos. 2:26-cv-08628 and 2:26-cv-08630 (filed Nov. 11, 2026)
