VanEck Data Breach Lawsuit

An unauthorized party took files from investment manager VanEck in April 2026. The files included Social Security numbers and financial account numbers. Letters went out October 2.

What Happened at VanEck

Van Eck Associates Corporation (VanEck) is a New York investment manager known for its exchange-traded funds and mutual funds.

According to its notice filed with the New Hampshire Attorney General, VanEck was alerted to suspicious activity on April 15, 2026. An investigation found that an unauthorized third party accessed part of its network and took files between April 14 and 15. VanEck finished reviewing the files on or about September 1 and mailed letters on or about October 2, 2026.

What VanEck’s CEO Said About the Hack

InvestmentNews reported on September 17, 2026 that chief executive Jan van Eck told a conference audience, “We got hacked several months ago,” and described the attack as social engineering. Social engineering means tricking an employee, often by phone, email or text, into giving up access or passwords.

According to InvestmentNews, he also said the attackers were far removed from client assets and that VanEck does not keep personal client data. The notice letters, however, confirm that Social Security numbers and financial account numbers were in the stolen files. The notice does not say whether the people affected are clients, employees or others.

Five and a Half Months to Notify

VanEck learned of the attack on April 15, 2026. Letters went out about October 2, five and a half months later. VanEck has not disclosed the total number of people affected. Its New Hampshire filing lists one New Hampshire resident.

What Information Was Exposed?

According to the New Hampshire filing, the information included:

• Name
• Social Security number
• Financial account number

What Is VanEck Offering Affected Individuals?

VanEck is offering 12 months of free credit monitoring and identity theft protection through TransUnion (Cyberscout). People must enroll within 90 days of the date on their letter, using the code provided.

VanEck’s assistance line is 1-800-405-6108, Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern Time.

Your Information Is at Risk

A Social Security number paired with a financial account number is a serious combination. Criminals can use it to pose as the account holder, open new credit or try to move money.

Affected individuals can take these steps:

• Enroll in the free monitoring within 90 days
• Ask their bank or brokerage about adding a PIN or password and about changing the exposed account number
• Place a free credit freeze with all three credit bureaus
• Treat any call or email that mentions VanEck or the incident with caution

Do You Have Legal Options?

Financial firms that hold Social Security numbers and account numbers have a legal obligation to safeguard them and to notify people promptly when they are exposed. When that obligation is not met, affected individuals may have legal rights and remedies worth discussing with an attorney. Emery | Reddy is investigating this incident on behalf of people who received a notice letter.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. No Fee Unless We Recover. Call 916.995.5968.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Frequently Asked Questions

How many people were affected by the VanEck data breach?

VanEck has not said. Its New Hampshire filing lists one resident of that state. The full number is unknown.

What information was exposed?

• Name
• Social Security number
• Financial account number

How did the hackers get in?

VanEck’s CEO said the attack was social engineering, according to InvestmentNews. That usually means someone was tricked into giving access. The notice letter does not describe the method.

Why did it take so long to get a letter?

VanEck found the attack on April 15, 2026 and says it finished reviewing the files around September 1. Letters went out around October 2, about five and a half months after discovery.

What should I do if I received a letter?

• Enroll in the free monitoring within 90 days of your letter date.
• Call your bank or brokerage about the exposed account.
• Freeze your credit with Equifax, Experian and TransUnion.
• Save your letter and talk with an attorney about your options.

Do I have a legal claim?

You may. Companies that hold Social Security numbers and financial account numbers have a duty to protect them and to tell people promptly when they are exposed. If you received a Notice of Data Breach letter from VanEck, contact Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.