Fitzgerald Wealth Management, a Scottsdale-based financial services firm, reached a class action settlement after a cyberattack in April 2025 exposed approximately 5.7 million individual records. The settlement, now active through fwmdatasettlement.com, covers clients whose personal information was stolen during an extortion-driven breach by the hacking group ShinyHunters. If you received a notification letter from Fitzgerald Wealth Management in July 2025, you are likely eligible for complimentary credit monitoring services and should file a claim to access all available remedies. The class action lawsuit, Khalid Rast v.
Fitzgerald Wealth Management, LLC (Case No. CV2025-024424), was filed in Superior Court of Maricopa County, Arizona. The settlement represents one of several major financial services breaches in 2025 affecting millions of consumers. Unlike some settlements that offer only statutory damages, this one includes practical protective measures because identity theft risk is substantial when financial information is compromised.
Table of Contents
- What Was the Fitzgerald Wealth Management Cyberattack and Why Did It Happen?
- Scope of the Settlement and Who Qualifies as an Affected Class Member
- Settlement Details and Available Remedies
- How to File Your Claim and Enroll in Credit Monitoring
- Understanding Credit Monitoring and Identity Theft Risk
- What Types of Personal Information Were Exposed
- ShinyHunters’ Methods and Why This Breach Matters in Context
- Frequently Asked Questions
What Was the Fitzgerald Wealth Management Cyberattack and Why Did It Happen?
On April 2025, ShinyHunters, a known extortion-focused hacking group, compromised Fitzgerald Wealth Management’s systems in a targeted cyberattack. ShinyHunters operates by infiltrating corporate networks, exfiltrating sensitive data, and threatening to publish or sell the information unless a ransom is paid. This particular breach was not a random attack but a deliberate targeting of the firm’s database containing client financial records, personal identification numbers, and investment account details.
The attack exposed approximately 5.7 million individual records, making it one of the largest financial services breaches of 2025. Fitzgerald Wealth Management discovered the breach and notified affected individuals on July 2, 2025, including Massachusetts residents who received formal data breach notification letters from state authorities. The firm’s notification confirmed that sensitive personal identifiable information had been accessed, though the specific categories of data varied depending on each client’s account and interactions with the company.
Scope of the Settlement and Who Qualifies as an Affected Class Member
The settlement applies to all individuals whose personal information was accessed during the April 2025 breach, regardless of whether they maintained an active account with Fitzgerald Wealth Management or had previously worked with the firm. The class includes Massachusetts residents who were specifically named in state attorney general notifications, but extends far beyond that jurisdiction because Fitzgerald Wealth Management serves clients nationally.
A critical limitation of many data breach settlements is that they offer little beyond credit monitoring, leaving victims to absorb emotional labor and ongoing vigilance costs. This settlement does provide complimentary credit monitoring services for multiple years, which is standard for financial services breaches but should not be your only protection layer. You remain responsible for monitoring your own credit reports independently through annualcreditreport.com, requesting fraud alerts with the credit bureaus, and reviewing your financial accounts for unauthorized activity—actions the settlement does not require companies to take on your behalf.
Settlement Details and Available Remedies
The Rast v. Fitzgerald Wealth Management settlement was reached after the Superior Court of Maricopa County accepted the parties’ stipulated agreement. The settlement website, fwmdatasettlement.com, is the official portal where affected individuals can submit claims, verify their eligibility, and enroll in credit monitoring services.
The firm has allocated resources to implement notification procedures and establish monitoring enrollment, though the full settlement payout structure and individual award amounts depend on the number of valid claims filed. One specific example of settlement complexity: if 100,000 individuals file claims for the available monitoring services, the per-person value may be distributed differently than if only 10,000 file. Unlike cash settlements where each claimant receives an equal payment, credit monitoring settlements typically offer a fixed benefit pool. You should file your claim promptly rather than assuming you can do so later, as there may be administrative deadlines beyond which claims cannot be processed.
How to File Your Claim and Enroll in Credit Monitoring
To access the settlement benefits, visit fwmdatasettlement.com and locate the claim filing portal. You will need to provide your name, email address, and details linking you to Fitzgerald Wealth Management, such as your former or current account number, the dates you worked with the firm, or personal information confirming your identity. The claims administrator will verify your eligibility based on records from the breach notification list.
The enrollment process for complimentary credit monitoring typically takes one business day to a few days after your claim is approved. You will receive an enrollment code via email and instructions for activating monitoring with the designated credit monitoring service. One tradeoff to consider: enrollment in the settlement’s credit monitoring does not prevent you from separately purchasing additional identity theft protection services if you want more comprehensive coverage, though those paid services are not required and may duplicate features already provided.
Understanding Credit Monitoring and Identity Theft Risk
Credit monitoring services included in data breach settlements typically cover three things: monitoring all three major credit bureaus (Equifax, Experian, TransUnion), alerting you to new account inquiries and hard credit pulls, and providing access to your credit score. However, credit monitoring has a significant limitation—it detects fraud only after accounts are opened or charges are made. A criminal with your financial information could drain a bank account or redirect tax refunds, actions that bypass credit bureau reporting entirely.
Because Fitzgerald Wealth Management manages investments, retirement accounts, and financial planning for clients, the breach poses a higher than average identity theft risk. Attackers who possess your investment account details, Social Security number, and date of birth can potentially access retirement accounts, redirect distributions, or commit tax fraud. You should create logins or reset passwords on any online financial accounts affiliated with Fitzgerald Wealth Management even if you are no longer an active client, and consider filing an identity theft report with the FTC at identitytheft.gov if you notice any suspicious activity within 90 days of the settlement notification date.
What Types of Personal Information Were Exposed
The July 2025 notification letters from Fitzgerald Wealth Management specified that sensitive personal identifiable information was exposed, with the specific categories varying by individual based on their account history and services used. For many clients, this included full names, Social Security numbers, dates of birth, investment account numbers, and financial account balances. For others, it may have included banking information, beneficiary details, or copies of government-issued identification documents.
The variation in exposed data types creates complexity for victims because it affects fraud risk differently. A client whose only exposed information was a mailing address faces minimal identity theft risk, while a client whose Social Security number and bank account details were compromised faces substantially higher risk. Review the notification letter you received from Fitzgerald Wealth Management for the specific categories listed—this tells you which accounts and services require the most urgent protective action.
ShinyHunters’ Methods and Why This Breach Matters in Context
ShinyHunters operates differently from ransomware groups that simply encrypt data and demand payment for decryption. Instead, ShinyHunters infiltrates networks, copies sensitive data, and leverages the threat of public disclosure or sale on the dark web as pressure for payment. The group has targeted major companies across multiple industries, establishing a track record of monetizing stolen financial and personal data rather than simply destroying it.
The significance of the Fitzgerald Wealth Management breach is that ShinyHunters specifically targeted a financial services firm whose clients already hold substantial assets and financial information concentrated in one location. This makes the stolen data highly valuable to criminal buyers—a complete client profile with investment balances, asset types, and banking relationships can be used for sophisticated fraud schemes including impersonation, wire fraud, and fraudulent account opening. The settlement’s provision of credit monitoring addresses one vector of fraud but does not protect against direct account compromise or wire fraud targeting investment accounts. You should implement two-factor authentication on all accounts affiliated with Fitzgerald Wealth Management and consider contacting the firm directly to verify whether any accounts have been accessed or modified since the breach date.
Frequently Asked Questions
Am I automatically enrolled in the settlement’s credit monitoring, or do I need to file a claim?
You must file a claim through fwmdatasettlement.com to enroll. The settlement does not automatically activate monitoring—you are responsible for submitting your information to verify eligibility and confirm enrollment.
How long will the complimentary credit monitoring last?
Credit monitoring duration varies by settlement but typically lasts 2-3 years. Check the specific terms on fwmdatasettlement.com or your settlement notice letter for the exact period applicable to your case.
Can I get a cash payment instead of credit monitoring?
The Fitzgerald Wealth Management settlement primarily provides credit monitoring as the remedy. Individual cash payments, if available, are typically limited and allocated based on documented fraud losses after the settlement is finalized.
What should I do if I notice unauthorized activity on my accounts?
Contact your bank or investment firm immediately to report fraud, freeze affected accounts if necessary, and file an identity theft report with the FTC at identitytheft.gov. Provide documentation to the settlement claims administrator if your fraud is connected to the Fitzgerald breach.
Does this settlement cover identity theft that hasn’t occurred yet?
The settlement provides monitoring to detect future fraud, not compensation for hypothetical future losses. Complimentary credit monitoring is the primary preventive benefit included in this settlement.
Where can I find my settlement claim status?
Visit fwmdatasettlement.com and log into the claims portal with your email and credentials. The status tracker will show whether your claim is under review, approved, or if additional information is needed.
You Might Also Like
- Duke Health Meta Pixel Settlement Resolves Claims Patient Data Was Shared With Facebook
- Fandango Convenience Fee Settlement Resolves Claims Moviegoers Paid Improper Fees
- Quest Diagnostics Data Breach Class Action Claims Lab Patient Information Was Exposed
Open Settlements You Can Claim Now
Browse current class action settlements accepting claims — several require no proof of purchase: