Quick Answer
The Fidelity data breach settlement is a $2.5 million class-action resolution finalized in March 2026, addressing the August 2024 incident in which an unauthorized third party accessed sensitive customer documents through fraudulently created accounts. Exactly 77,099 individuals had their Social Security numbers, driver licenses, and account-related information exposed.
If you received an official Notice of Data Breach letter from Fidelity Investments in late 2024 or early 2025, you are likely a class member. Eligible claimants can request reimbursement for out-of-pocket expenses, compensation for time spent recovering from identity theft, and a pro-rata cash payment from the remaining settlement pool.
Fidelity has not admitted wrongdoing, but the agreement provides meaningful financial protection for affected customers. Watching for the official settlement administrator notice and filing before the deadline are essential.
The August 2024 Fidelity Data Breach: What Exactly Happened?
The origins of the recent settlement trace back to a specific window in the summer of 2024. Between August 17 and August 19, 2024, financial services giant Fidelity Investments suffered a targeted data security incident that would later trigger a sweeping class-action lawsuit.
According to reports submitted by Fidelity to various state attorneys general, including those in New Hampshire and Massachusetts, the breach occurred when an unauthorized third party submitted fraudulent, automated requests to an internal database. This specific database housed images of highly sensitive documents pertaining to Fidelity customers. The breach was executed through newly established customer accounts designed specifically to bypass standard external firewalls.
Fidelity internal security teams detected the unauthorized access on August 19, 2024, immediately terminating the connection and launching a full-scale forensic investigation alongside external cybersecurity experts. The company began notifying affected individuals weeks later, after the scope of the exposure had been fully mapped.
What Information Was Exposed?
The most alarming aspect of the Fidelity data breach was not the volume of accounts accessed, but the extreme sensitivity of the compromised data. The breach impacted exactly 77,099 individuals across multiple states.
According to the official breach notifications, the compromised files included some of the most critical pieces of personal identity data a consumer can hold. Identity thieves can use this combination to open fraudulent credit accounts, file false tax returns, or take over existing financial accounts.
- Social Security Numbers (SSNs), the most critical piece of identity data, leaving victims highly vulnerable to identity theft.
- Driver licenses and state-issued identification details.
- Specific financial account information, including account structures and historical details.
- Customer name, date of birth, and mailing address fields.
- Internal document images uploaded during onboarding or account verification.
Importantly, Fidelity confirmed that the core transactional systems were not breached, meaning the hackers did not gain direct access to invested funds, stock portfolios, or cash balances.
The 2026 Legal Resolution: The $2.5 Million Settlement
Following the mandatory breach notifications, consumer protection attorneys launched investigations, arguing that the financial firm failed to adequately secure its internal databases against fraudulent queries. The lawsuits were consolidated and moved forward as a class action.
In March 2026, Fidelity Investments officially agreed to a $2.5 million settlement to resolve the consolidated class-action lawsuit. While Fidelity did not admit to any legal wrongdoing as part of the agreement, the settlement provides a substantial pool of funds to compensate the nearly 77,000 affected individuals.
Who Is Eligible for the Settlement?
You are considered a class member and are eligible to file a claim if you fall into a defined category outlined by the settlement administrator. Eligibility is tied directly to the official notification you would have received from Fidelity.
- You are a resident of the United States.
- You received a direct, official Notice of Data Breach letter from Fidelity Investments (usually mailed in late 2024 or early 2025).
- Your information was specifically named as compromised in the August 2024 incident.
- You did not previously opt out of the class.
How to File a Claim and What You Can Recover
The core purpose of a data breach settlement is to reimburse victims for the tangible and intangible harms suffered due to the exposure of their personal data. If the settlement is finalized by the court, class members who submit a valid claim form could be eligible for multiple tiers of compensation.
The first tier covers documented out-of-pocket losses. You can claim cash reimbursement for fees tied to credit reports, credit monitoring services you purchased yourself, identity theft recovery costs, and potentially fraudulent bank charges.
The second tier compensates you for lost time. Victims can often claim a set hourly rate for the time spent freezing credit reports, disputing fraudulent charges, or updating compromised accounts. The third tier is a pro-rata cash payment distributed equally among approved claimants from the remaining funds.
Next Steps for Affected Consumers
If you believe you were affected but misplaced your original notice, it is highly recommended that you monitor your credit reports via the major bureaus (Equifax, Experian, and TransUnion) for any suspicious activity. Look out for the official settlement administrator website, which will provide the digital claim forms and exact filing deadlines.
Remember, participating in a class action costs you nothing out of pocket, but failing to file before the deadline means you forfeit your right to compensation. Treat the settlement notice as a financial document worth your full attention.
The takeaway
The Fidelity data breach settlement is a reminder that even the largest, most trusted financial institutions can suffer significant security incidents. If you are one of the 77,099 affected customers, the $2.5 million settlement gives you a clear path to recover documented expenses and claim a share of the pool.
Acting quickly matters. File your claim, freeze your credit, and stay alert to suspicious account activity well into 2026 and beyond.
