The Fidelity Investments data breach lawsuit is a class action over an August 2024 cyberattack that exposed personal and financial information of Fidelity customers. The consolidated case, In re: Fidelity Data Breach Litigation, is in federal court in Massachusetts. Fidelity denied wrongdoing but agreed to a $2.5 million settlement that offers up to $5,000 for documented losses, a cash payment estimated at about $100, and two years of credit monitoring. The claim deadline was July 27, 2026, so new claims are closed. Here is what happened, who qualified, and where the case stands now.
Fidelity data breach lawsuit at a glance
| Detail | What we know |
|---|---|
| Case | In re: Fidelity Data Breach Litigation, No. 1:24-cv-12601 (D. Mass.) |
| Breach dates | August 17 to 19, 2024 |
| Data exposed | Names, Social Security numbers, financial account details and driver’s license information |
| Settlement amount | $2.5 million; Fidelity denied wrongdoing |
| Maximum award | Up to $5,000 for documented losses |
| Claim deadline | July 27, 2026 (closed) |
| Final approval hearing | July 9, 2026 |
What happened in the Fidelity data breach?
Between August 17 and August 19, 2024, an unauthorized third party accessed Fidelity’s systems. According to Fidelity’s breach notices, the attacker opened two customer accounts and then used them to view documents belonging to other customers. Fidelity detected the activity on August 19, cut off the access, and later notified state regulators.
Fidelity first reported that about 77,000 customers were affected. However, the settlement documents describe a class of roughly 155,000 individuals and joint account holders who may have been affected. The exposed information included names, Social Security numbers, financial account and routing numbers, and driver’s license details. In response, Fidelity offered affected customers 24 months of free credit monitoring.
What does the Fidelity lawsuit claim?
Customers filed several proposed class actions after the breach, and the court combined them into one case. The plaintiffs claim that Fidelity failed to use reasonable cybersecurity safeguards and did not protect sensitive customer data. As a result, they argue, customers face a higher risk of identity theft and fraud.
The lawsuit relied on consumer protection and data privacy laws, including those of Massachusetts, California and New York. Fidelity denied the allegations, and no court ruled on whether they were true.
Fidelity settlement details
Under the proposed settlement, eligible class members could choose from several benefits:
- Documented losses: Up to $5,000 for out-of-pocket costs tied to the breach, such as identity theft losses, professional fees, credit freezes and credit monitoring.
- Cash payment: A pro rata payment estimated at about $100, depending on how many people file claims.
- California residents: An extra $50 payment, also subject to adjustment.
- Credit monitoring: Two years of single-bureau credit monitoring and identity theft insurance.
According to ClassAction.org, the class covers people in the United States who received notice of the incident, plus others whose financial account and routing numbers were exposed. In addition, only one claim is allowed per shared account number.
Settlement timeline
| Date | Event |
|---|---|
| August 17–19, 2024 | Unauthorized access to Fidelity systems |
| October 2024 | Fidelity notifies customers and state regulators |
| February 2025 | Consolidated class action complaint filed |
| March 11, 2026 | Court grants preliminary approval |
| June 26, 2026 | Deadline to opt out or object |
| July 9, 2026 | Final approval hearing |
| July 27, 2026 | Deadline to file a claim |
Massachusetts regulator penalty
Separately, Massachusetts Secretary of the Commonwealth William Galvin brought an action against Fidelity Brokerage Services over the breach. According to reports, Fidelity agreed in 2026 to pay $1.25 million, hire an independent cybersecurity consultant, and notify any Massachusetts residents it had missed, without admitting or denying the findings. That penalty went to the state, not to customers.
When will Fidelity settlement payments arrive?
Payments go out only after the court grants final approval and any appeals end. As of our last check, the official Fidelity settlement website had not posted a payment date. Therefore, approved claimants should watch for updates from the settlement administrator. Also, checks typically expire 90 days after they are issued, so cash them promptly.
What Fidelity customers should do now
- Enroll in credit monitoring. Use the free monitoring Fidelity or the settlement offered.
- Freeze your credit. A credit freeze with Equifax, Experian and TransUnion is free and blocks new accounts in your name.
- Watch your accounts. Review Fidelity and bank statements for activity you do not recognize.
- Keep records. Save receipts for any costs tied to the breach.
For another recent data breach settlement, see our Cash App class action settlement breakdown. Our guide to being a claimant also explains how settlement claims work.
Current status of the Fidelity data breach lawsuit
The claim deadline passed on July 27, 2026, and the final approval hearing was set for July 9, 2026. As of our last check, the settlement website had not posted a final approval order or a payment schedule. Fidelity continues to deny wrongdoing.
Last updated: October 16, 2026. We checked the official settlement website and public reports on this date.
Fidelity is one of several large companies to settle data breach claims recently. For example, see our breakdown of the Comcast data breach settlement.
Retailers face data privacy suits too. See our guide to the Home Depot privacy class actions.
Conclusion: the Fidelity data breach lawsuit in brief
The Fidelity Investments data breach lawsuit grew out of an August 2024 attack in which an outsider used new customer accounts to view other customers’ documents. Fidelity denied wrongdoing but agreed to a $2.5 million class settlement offering up to $5,000 for documented losses, an estimated $100 cash payment, and two years of credit monitoring.
The claim period is closed, and payments depend on final approval. More cases are explained in our Lawsuits section.
Frequently asked questions
Is there a Fidelity data breach lawsuit?
Yes. In re: Fidelity Data Breach Litigation, No. 1:24-cv-12601, is pending in federal court in Massachusetts and resolved through a proposed $2.5 million settlement.
How much is the Fidelity settlement payment?
Up to $5,000 for documented losses, or a pro rata cash payment estimated at about $100. California residents could receive an extra $50.
Can I still file a Fidelity settlement claim?
No. The deadline was July 27, 2026.
How many people were affected by the Fidelity breach?
Fidelity first reported about 77,000 customers. The settlement documents describe roughly 155,000 individuals and joint account holders who may have been affected.
Did Fidelity admit wrongdoing?
No. Fidelity denied the claims and agreed to settle to avoid further litigation.
Sources
- Fidelity Investments Data Breach Litigation: official settlement website and FAQ
- ClassAction.org: $2.5M Fidelity Investments settlement ends litigation over August 2024 data breach
- Notice of proposed class action settlement, In re: Fidelity Data Breach Litigation (D. Mass.)
- Fidelity breach notification to state attorneys general (October 2024)
- Reports on the Massachusetts Securities Division action against Fidelity Brokerage Services (2026)