A hacker claims data on about 14M people was taken. Vanguard has not given a total, and three class actions are already filed