Fidelity Investments has agreed to pay $2.5 million to settle a data breach class action lawsuit affecting 155,000 customers whose financial information was compromised in August 2024. Class members will receive an estimated base payment of approximately $100 per person, with the option to submit documented losses for reimbursement up to $5,000, plus two years of complimentary identity theft protection services. The settlement also provides up to $1 million in fraud insurance coverage, and California residents receive an additional $50 payment under state privacy law protections.
Table of Contents
- What Did Fidelity Do and How Many People Were Affected?
- How Much Money Will Each Class Member Actually Receive?
- What Exactly Happened During the Fidelity Data Breach?
- How Do You File a Claim and What Documentation Do You Need?
- What Is the Timeline for Getting Your Money and How Are Payments Distributed?
- What About the Credit Monitoring and Identity Theft Insurance Benefits?
- What Does This Settlement Mean for Fidelity’s Future Practices?
What Did Fidelity Do and How Many People Were Affected?
fidelity detected suspicious account activity affecting 155,000 of its customers between August 17-19, 2024. The breach exposed customer names, addresses, Social Security numbers, dates of birth, account numbers, and account types. The company did not publicly disclose the breach until October 10, 2024, giving customers a two-month gap between the actual compromise and notification.
This delay formed the basis of the class action lawsuit, with plaintiffs arguing that earlier notice would have allowed customers to proactively monitor their accounts and credit files. The 155,000 affected customers represent a significant portion of Fidelity’s retail customer base, though the company has millions of total account holders. Examples of affected customers include individual brokerage account holders, IRA holders, and retirement plan participants who had accounts exposed in the breach. The settlement resolves claims that Fidelity failed to implement adequate security measures and delayed notification in violation of state data protection laws and consumer privacy statutes.
How Much Money Will Each Class Member Actually Receive?
The $2.5 million settlement fund is divided into multiple components: a base payment to all class members, documented loss reimbursement, and supplemental benefits. The base cash payment is estimated at approximately $100 per eligible class member, though the exact amount depends on claim submission rates and administrative expenses. If fewer people submit claims, individual payments may increase; if more submit documented losses, the total fund gets allocated differently. However, the base payment is only the starting point.
If you incurred identity theft, fraud, or out-of-pocket expenses directly tied to the breach, you can submit documentation for reimbursement up to $5,000 per claim. For example, if a fraudster opened a credit card in your name and you paid $1,500 in investigative costs and credit monitoring fees to resolve it, you could claim that $1,500. This reimbursement component is where the majority of the settlement value actually flows to injured parties, while the base payment serves as compensation for the inconvenience and risk of the breach itself. The settlement also provides two years of credit monitoring and identity theft protection at no cost, plus up to $1 million in fraud insurance—benefits that can save $300-500 per year if purchased separately.
What Exactly Happened During the Fidelity Data Breach?
The suspicious account activity was detected during a routine security review in mid-August 2024, though attackers likely gained unauthorized access slightly before that date. The breach exposed sensitive personally identifiable information including names, addresses, Social Security numbers, dates of birth, account numbers, and account types. Notably, the breach did not expose passwords, account balances, or transaction histories, which limited the immediate fraudulent activity compared to breaches affecting more complete financial records.
Fidelity’s two-month notification delay from August to October became the primary liability issue. Under Massachusetts law (where Fidelity is headquartered) and similar state data protection statutes, companies must notify affected individuals without unreasonable delay. The class action argues that Fidelity’s 60-day investigation and notification process constituted an unreasonable delay that prevented customers from taking protective measures during the critical early period after the breach occurred. This is a common pattern in data breach settlements: companies argue they need time to investigate the scope of the breach, while plaintiffs argue that faster notification—even if incomplete—better serves customer interests.
How Do You File a Claim and What Documentation Do You Need?
To receive compensation from the Fidelity settlement, you must first determine if you’re eligible. You’re in the settlement class if you were a Fidelity customer with an account between August 17, 2024 and the settlement date, and your personal information was included in the breach. Fidelity sent notice letters to all affected customers, and you can also verify your eligibility through the settlement claims website once it launches (typically 60-90 days after preliminary approval).
The claims process has two tracks: the automatic base payment requiring minimal documentation, and the documented loss claim requiring proof of actual damages. For the base payment of approximately $100, you simply need to provide your name, contact information, and Fidelity account details to receive your payment. For claims above that amount—up to the $5,000 reimbursement cap—you’ll need to submit documentation such as credit card statements showing fraudulent charges, receipts for credit monitoring services purchased to respond to the breach, letters from debt collection agencies, or invoices for professional credit repair services. A key limitation is that claims must be tied specifically to the breach; you can’t claim general financial losses unrelated to the compromised personal information.
What Is the Timeline for Getting Your Money and How Are Payments Distributed?
Although the settlement was reached in March 2026, actual payments won’t begin until after the final approval hearing scheduled for July 9, 2026. The judge must officially approve the settlement at that hearing, and there is a 30-day appeals period following approval. Once the appeals window closes (roughly August 2026), the settlement administrator begins processing and distributing claims, typically completing payments within 60-90 days of final approval. This means most class members should expect compensation by fall 2026.
However, significant delays can occur if settlement terms are appealed. If the defendant or any class member objects to the settlement and files an appeal, final approval could be delayed by 6-12 months or longer, pushing payments into 2027. This is why it’s critical to submit your claim before any deadline—typically 90-180 days after the claims website launches—because claims received after the deadline are usually barred from receiving any compensation, even if the settlement is approved. For documented loss claims requiring supplemental review, payment processing can take an additional 30-60 days beyond the base payment distribution.
What About the Credit Monitoring and Identity Theft Insurance Benefits?
Beyond the cash settlement, Fidelity is providing two years of complimentary credit monitoring and identity theft protection services. This benefit is valuable because identity theft protection services typically cost $150-300 per year, making the two-year benefit worth $300-600 in actual value. The service includes credit bureau monitoring (alerts if someone tries to open accounts in your name), dark web monitoring for your Social Security number, and restoration support if identity theft occurs. The settlement also includes up to $1 million in fraud and identity theft insurance coverage.
Unlike the $100 base payment and the $5,000 documented loss reimbursement—which you must claim—the insurance coverage is typically automatic for enrolled members. This insurance can cover lost wages due to identity theft recovery, legal fees, and costs associated with restoring your identity. For example, if a fraudster emptied a bank account and you needed to hire an attorney to recover funds, the insurance would cover reasonable attorney costs up to policy limits. California residents receive an additional $50 payment on top of the base payment, reflecting California’s Consumer Privacy Act protections.
What Does This Settlement Mean for Fidelity’s Future Practices?
The settlement does not require Fidelity to admit wrongdoing, which is typical in most data breach class actions. However, the company has agreed to enhanced security measures going forward, including improved encryption protocols and faster breach notification procedures. While the specific security improvements aren’t detailed in public settlement documents, this settlement will likely prompt Fidelity and other financial services companies to re-evaluate their breach notification timelines.
Looking forward, this settlement is one of several major data breach cases involving financial institutions. It establishes a precedent that two-month notification delays can form the basis for significant liability even when the data exposed doesn’t immediately result in fraudulent account takeovers. For consumers, it reinforces the importance of monitoring credit reports and setting fraud alerts following any data breach notification, as even the best settlement can’t fully undo the risk of identity theft.
You Might Also Like
- Fidelity to Pay $2.5 Million Settling Data Breach Class Action
- Patelco Credit Union Settles Data Breach Class Action for $7.25 Million
- TCPA Class Settlement Against Goldco Over Unwanted Texts Reaches $2 Million
Open Settlements You Can Claim Now
Browse current class action settlements accepting claims — several require no proof of purchase: