Quick Answer
If you received a data breach notification letter from Fidelity Investments in late 2024, it is time to check your mailbox again. Following a prolonged class action lawsuit, Fidelity Investments has agreed to a 2.5 million dollar settlement as of May 2026 to resolve litigation stemming from a significant cybersecurity incident.
While Fidelity denies any wrongdoing, the settlement provides financial remedy and credit protection for thousands of individuals whose sensitive personal data was exposed.
Closing the loop on the 2024 breach
If you received a data breach notification letter from Fidelity Investments in late 2024, it is time to check your mailbox again. Following a prolonged class action lawsuit, Fidelity Investments has agreed to a 2.5 million dollar settlement as of May 2026 to resolve litigation stemming from a significant cybersecurity incident.
While Fidelity denies any wrongdoing, the settlement provides financial remedy and credit protection for thousands of individuals whose sensitive personal data was exposed.
What happened in August 2024
Between August 17 and August 19, 2024, a third party threat actor gained unauthorized access to an internal Fidelity database. The hackers used newly established, fraudulent customer accounts to submit requests that pulled images of sensitive documents belonging to legitimate Fidelity customers.
The breach was detected and terminated by August 19, but not before the data of approximately 77,099 individuals was compromised. The exposed information included:
- Social Security numbers
- Driver's license details
- Financial account information
Fidelity confirmed at the time that the hackers did not gain direct access to customer funds or active trading accounts.
The 2026 settlement details
The 2.5 million dollar settlement fund is designed to compensate class members for the time, stress, and potential financial loss associated with the breach. Eligible class members can claim:
- Credit monitoring: Free enrollment in premium identity theft protection and credit monitoring services to safeguard against future fraud.
- Out of pocket expense reimbursement: Claims for documented financial losses directly tied to the breach (bank fees, communication charges, costs of freezing credit).
- Time spent: Compensation for the time spent mitigating the effects of the breach, paid at an hourly rate.
- Cash alternative: Depending on the structure of the final payout pool, some members may opt for a flat cash payment in lieu of itemized reimbursements.
What are your next steps
If you are an affected customer, you should receive a formal settlement notice via mail or email this month detailing your unique claimant ID. You must submit a valid claim form before the designated deadline to receive compensation. If you wish to retain your right to sue Fidelity individually, you must formally opt out of the settlement class.
Important note and disclaimer
This article is general information about the publicly announced settlement and is not legal or financial advice. Always read the official notice and consult a qualified attorney about your specific situation before submitting or opting out of any class claim.
Who Is Eligible to File a Claim
The settlement covers individuals whose personal information was exposed in the August 2024 Fidelity breach. That includes anyone who received an official breach notification letter from Fidelity, plus a small number of related accounts identified during the post-breach forensic review.
You do not need to have suffered identity theft to qualify for the basic cash benefit. Documented losses unlock the higher payout tier.
What You Can Claim
- Cash payment: up to 100 dollars per class member without documentation.
- Documented loss payment: up to 7,500 dollars for verified out-of-pocket losses tied to the breach.
- Credit monitoring: 24 months of three-bureau credit monitoring at no cost.
- Lost time: reimbursement for up to five hours at 25 dollars per hour for time spent dealing with the breach.
The Deadlines That Matter
The claim deadline is currently set for July 2026, with a final approval hearing earlier in the month. Objection and opt-out deadlines fall about 30 days before the claim deadline. Missing the claim deadline means losing access to both the cash and the credit monitoring benefits.
Set a reminder for two weeks before the deadline. Last-minute filings tend to surface document errors that take time to fix.
How to File Step by Step
- Go to the official settlement website listed on your notice letter.
- Enter your unique claim ID and confirmation code.
- Choose between the basic cash benefit and the documented loss option.
- Upload supporting documents if claiming losses or lost time.
- Confirm your payment method, typically electronic transfer or a mailed cheque.
Keep a screenshot of your filed claim. The settlement administrator does send confirmation emails, but the screenshot is your fastest route to support if anything goes missing.
Common Mistakes That Get Claims Rejected
- Submitting illegible documents. Scan or photograph receipts in good light.
- Claiming losses without a clear causal link to the breach.
- Filing multiple claims under different email addresses for the same person.
- Submitting credit monitoring receipts for services purchased before the breach.
When You Will Actually Get Paid
Payments typically begin 60 to 90 days after the final approval hearing, assuming no appeals are filed. Appeals can delay distribution by six months or more. Most class members in similar past settlements received cash benefits within four to six months of the deadline.
If you have moved, update your address with the settlement administrator immediately. Mailed cheques to old addresses are the single largest cause of delayed payments in cases like this.
Should You Opt Out
Opting out only makes sense if you intend to file your own lawsuit and have a clear basis for claiming losses well above the settlement maximum. For most people, the easiest path is to file a basic claim, accept the cash and credit monitoring, and move on with stronger account hygiene from here.
