Vanguard Reports Data Breach Affecting Social Security Numbers

Vermont's Attorney General register lists Vanguard Group, Inc. after a security incident exposed Social Security numbers of 94 state residents.

Updated on Nov. 7, 2026 in Cybersecurity

Isometric editorial illustration of a stack of sealed cream envelopes with a steel padlock on top, set on a slate-grey surface. — Vanguard Group reported a data security incident exposing Social Security numbers of 94 Vermont residents, according to a state Attorney General filing dated November 4, 2026. AI Illustration. Upload story photo >

Live Poll

Do you trust financial companies to protect your Social Security number?

The Vanguard Group, Inc. appeared in the Vermont Attorney General's security breach register on November 4, 2026, after reporting a data security incident involving Social Security numbers. The filing identifies 94 Vermont residents whose personal information was affected.

Why it matters

Exposure of Social Security numbers raises the risk of identity theft and fraud for affected individuals, and the Vermont filing is a public record that residents can consult. The incident adds to ongoing scrutiny of how financial services firms protect sensitive customer and employee data.

The Vermont Attorney General's public register entry is a formal breach notification listing 94 affected Vermont residents with Social Security numbers as the compromised data type. The cause, timeline and nationwide total of affected individuals remain undisclosed.

The players

Vanguard Group, Inc.

Vanguard is a major American investment management company known for index funds and mutual funds, with its reported incident now under state breach notification.

Vermont Attorney General's Office

The Vermont Attorney General's office administers the state's security breach notification register, which requires companies to report incidents affecting state residents.

The details

The Vermont Attorney General's office published a notification of the Vanguard Group data security incident, with the filing dated November 4, 2026, and lists Vanguard under its financial services category. The filing does not specify whether other personal details were exposed or whether the affected individuals were customers, employees or others whose information the company held.

November 4, 2026: Vanguard Group's breach filing appears on the Vermont Attorney General's public register.

Industry Context

State data breach notification laws require companies to publicly report incidents affecting residents, and the Vermont register places this filing alongside many others in a continuing public record of financial services data exposures.

Vermont residents whose Social Security numbers may have been exposed should monitor their credit reports and consider placing a fraud alert or credit freeze. The filing does not say whether affected individuals will receive direct notification from Vanguard.

The takeaway

Residents can check the Vermont Attorney General's public security breach register to see whether a company they deal with has reported an incident affecting state residents. Reviewing credit reports regularly helps catch identity theft early after any exposure of Social Security numbers.