Fidelity Settles $2.5 Million Data Breach Lawsuit Over Delayed Customer Notification

Fidelity Investments and its subsidiary Fidelity Brokerage Services agreed to a $2.5 million settlement over allegations the financial services company failed to prevent a cyberattack and delayed notifying customers of the breach. Approximately 77,099 individuals had sensitive data compromised, including Social Security numbers, driver's license information, and financial account details, while an additional 86,000 customers whose banking information was exposed may also qualify for the settlement.

The Breach and Legal Claims

Between August 17 and 19, 2024, an unauthorized third party accessed Fidelity's computer network without authorization. The company did not notify customers of the incident until approximately two months later. According to court documents, plaintiffs alleged the breach was "preventable" and resulted from "inadequately secured computer systems" that enabled attackers to gain entry.

Class members from multiple states, including California, New York, and Florida, filed the complaint in February 2025, claiming they suffered fraud, credit score damage, and exposure of personal information on the dark web. Three plaintiffs specifically alleged their data appeared on underground networks. Fidelity denied wrongdoing but agreed to settle to avoid prolonged litigation and its associated costs and uncertainties.

Settlement Eligibility and Claims Process

The settlement could benefit more than 160,000 class members, including those directly notified of the breach and others whose bank account and routing numbers were exposed without notification. A Fairness Hearing scheduled for July 9, 2026, at the United States District Court for the District of Massachusetts will determine whether the agreement is fair and reasonable before the company begins distributing funds.

Customers uncertain about their eligibility can verify their status through the settlement website, by emailing info@FidelityDataSettlement.com, or by calling 833-386-6470. The settlement administrator can also be reached by mail at Fidelity Data Security Incident Settlement, P.O. Box 25226, Santa Ana, CA 92799-9958. Eligible individuals must file claims by the court-specified deadline to receive compensation.

Company Response and Security Commitment

Fidelity stated it remains "fully committed to the security of our clients' accounts and personal information." The company emphasized that litigation settlements represent a practical resolution mechanism for both parties, allowing them to avoid extended court proceedings while addressing class member concerns through monetary compensation.