Edelson Lechtzin LLP has opened an investigation into a reported data breach involving The Vanguard Group, Inc., offering free and confidential case evaluations to current and former Vanguard clients. Vanguard filed a breach notification with the Vermont Attorney General on November 4, 2026, identifying 94 affected Vermont residents and Social Security numbers among the information involved. Public reports and a newly filed class action describe a potentially broader incident in which threat actors allegedly claimed in mid-October to have accessed Vanguard network servers and advertised a database on a dark web forum. A cybersecurity firm reported that more than 14 million Vanguard-linked records were offered online, including SMS verification logs with timestamps, phone numbers, countries and carriers, but said the alleged breach was unverified. Vanguard has not confirmed those claims or disclosed how many people were affected nationwide. Public reports and state filings indicate the records may also include full legal names and account data. The investigation covers current and former individual and institutional Vanguard clients, and the class action alleges Vanguard does not appear to have notified affected individuals. Edelson Lechtzin says a potential class action could seek compensation for lost time, out-of-pocket costs and loss of privacy, while encouraging stronger data protection. The firm recommends reviewing Vanguard statements and credit reports, preserving breach notices, placing fraud alerts or credit freezes, and reporting suspected identity theft to the Federal Trade Commission.