Vanguard Group Discloses Data Breach Impacting Sensitive Consumer Information On February 11, 2026, investment management giant The Vanguard Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation, revealing that sensitive consumer information had been compromised. While the disclosure confirmed the exposure of at least one Massachusetts resident, the full scope of the incident remains unclear, given Vanguard’s vast client base. The breach involved Social Security numbers, a critical form of personally identifiable information (PII). No other types of compromised data have been publicly disclosed at this time. The notification did not specify the cause of the breach whether it stemmed from an external cyberattack, insider threat, or another vulnerability. In compliance with regulatory requirements, Vanguard has notified affected individuals and authorities. The company has not provided further details on the attack vector or the total number of impacted clients. The incident underscores the ongoing risks to financial institutions handling highly sensitive personal data.