The Fidelity Investments data breach lawsuit involves a cybersecurity incident that occurred in August 2024 and led to a federal class action against Fidelity.
The incident involved unauthorized access to certain information on Fidelity’s computer network between August 17 and August 19, 2024. According to the official settlement notice, the information potentially accessed varied by person and could have included names, Social Security numbers, financial account information, and driver’s license information.
The resulting lawsuit is called In re: Fidelity Investments Data Breach Litigation, Case No. 1:24-CV-12601-LTS, in the U.S. District Court for the District of Massachusetts.
The case has since moved toward a proposed $2.5 million class-action settlement. Eligible class members may be able to receive a cash payment and reimbursement for certain documented losses, subject to the settlement terms.
This article explains what happened, who may be included, the settlement amount, potential payments, claim requirements, and the latest status of the case.
Fidelity Data Breach Lawsuit: Quick Facts
| Question | Answer |
| Company | Fidelity Investments |
| Legal defendants | FMR LLC and Fidelity Brokerage Services LLC |
| Data incident | August 17–19, 2024 |
| Federal case | In re: Fidelity Investments Data Breach Litigation |
| Case number | 1:24-CV-12601-LTS |
| Court | U.S. District Court for the District of Massachusetts |
| Type of case | Class action |
| Proposed settlement | $2.5 million |
| Maximum documented-loss reimbursement | Up to $5,000 |
| Expected basic cash payment | About $100, depending on claims |
| California CCPA payment | $50, subject to settlement terms |
| Claim deadline | July 27, 2026 |
| Final approval hearing | July 9, 2026 |
| Current settlement status | Proposed settlement; official site says court approval is required |
The settlement website says the $2.5 million fund will first cover court-approved attorneys’ fees and costs, service awards, and settlement administration expenses. The remaining funds will be used for class-member benefits.
What Happened in the Fidelity Data Breach?
The data security incident occurred between August 17 and August 19, 2024.
According to the official settlement FAQ, a third party accessed and obtained certain information without authorization from Fidelity’s computer network.
Fidelity’s forensic investigation determined that the information potentially accessed differed among individuals. It may have included:
- Names
- Social Security numbers
- Financial account information
- Driver’s license information
The incident did not necessarily expose every type of information for every affected person.
The lawsuit was based on allegations concerning Fidelity’s handling and protection of customer information.
Fidelity has denied wrongdoing, and the settlement documents state that the court has not made a determination that Fidelity was legally responsible for the alleged harm.
When Was the Fidelity Data Breach Lawsuit Filed?
The federal case is In re: Fidelity Investments Data Breach Litigation, Case No. 1:24-CV-12601-LTS.
The litigation was brought against FMR LLC, doing business as Fidelity Investments, and Fidelity Brokerage Services LLC, also doing business as Fidelity Investments.
The lawsuit alleged that Fidelity failed to adequately protect confidential customer information involved in the August 2024 incident.
The case was brought as a proposed class action, meaning the named plaintiffs sought to represent a larger group of people affected by the same incident.
Was the Fidelity Data Breach a Class Action?
Yes.
The case is a class action rather than simply an individual lawsuit.
The official settlement website explains that the class includes certain people in the United States who received notice from Fidelity about the data security incident and other U.S. individuals whose financial account number and routing number were exposed in the incident.
There are specific exclusions and rules, so people should not assume that every Fidelity customer is automatically part of the settlement.
How Many People Were Affected?
Public reporting about the settlement has described the incident as affecting approximately 77,000 individuals.
The settlement documents, however, define eligibility based on the information contained in Fidelity’s records and the specific exposure criteria rather than simply saying that every Fidelity customer is included.
This distinction matters because Fidelity serves a very large customer base, while the settlement class is limited to people who meet the settlement’s definition.
What Information Was Exposed?
The information potentially accessed varied by individual.
According to the official settlement FAQ, it may have included:
- Personal names
- Social Security numbers
- Financial account information
- Driver’s license information
The fact that information may have been accessed does not mean that every affected person’s entire identity profile was exposed.
The settlement documents should be used to determine what information was associated with a particular class member.
Fidelity Investments Data Breach Settlement
One of the biggest developments in the case is the proposed $2.5 million settlement.
Under the agreement, Fidelity would establish a $2.5 million Settlement Fund.
That amount is not simply divided equally among everyone in the class.
The settlement fund must first cover certain court-approved expenses, including:
- Attorneys’ fees and litigation costs
- Service awards to class representatives
- Settlement administration expenses
The remaining amount is then available for class-member benefits.
This means that the headline “$2.5 million Fidelity settlement” should not be interpreted as $2.5 million being paid directly to consumers.
How Much Could You Receive From the Fidelity Data Breach Settlement?
The settlement provides several potential benefits.
- Pro Rata Cash Payment
Eligible class members can claim a pro rata cash payment.
The settlement FAQ says this payment is expected to be approximately $100, but the actual amount can be higher or lower depending on the number of valid claims and the amount remaining in the settlement fund after approved expenses.
Therefore, $100 should be described as an expected amount, not a guaranteed payment.
- Up to $5,000 for Documented Losses
People who suffered qualifying, documented out-of-pocket losses connected to the data security incident may be eligible for reimbursement of up to $5,000.
Examples listed by the settlement include:
- Identity theft or fraud losses
- Credit-report costs
- Credit-monitoring costs
- Credit freeze or unfreeze expenses
- Replacement identification costs
- Certain postage expenses
- Certain transportation expenses related to resolving identity theft or fraud
Claimants must provide supporting documentation.
This is important because $5,000 is not the standard payout.
It is the maximum reimbursement available for qualifying documented monetary losses under the settlement.
- Additional California Payment
California class members may also be eligible for a $50 CCPA payment, subject to the settlement terms.
The settlement FAQ states that this payment may be larger or smaller depending on the number of claims filed.
- Credit Monitoring and Identity Theft Protection
The settlement also provides eligible class members with the ability to enroll in two years of CyEx Financial Shield Complete.
The settlement website says the service includes monitoring for certain fraud and identity-theft risks and provides up to $1 million in financial fraud insurance.
Is the Fidelity Data Breach Settlement $5,000?
No.
This is an important distinction.
The $2.5 million figure is the total proposed settlement fund.
The $5,000 figure is the maximum reimbursement for qualifying documented monetary losses.
The expected basic payment is approximately $100, although the actual pro rata amount can change.
California residents may also qualify for the separate CCPA payment.
Therefore, headlines suggesting that every Fidelity customer will receive $5,000 would be inaccurate.
Who Qualifies for the Fidelity Data Breach Settlement?
The official settlement defines the class as:
People in the United States whom Fidelity notified about the data security incident under applicable state law, plus other U.S. individuals whose account number and routing number were exposed in the incident.
There is a special rule for joint account holders: where multiple joint account holders had one financial account number and routing number compromised, only one claim is permitted under the settlement.
The settlement also excludes certain people, including the judge and immediate court staff, Fidelity officers and directors, and people who validly exclude themselves from the settlement.
How Do You Know If You Are Part of the Class?
Fidelity sent notices to people it identified as potentially affected.
The official settlement website says class members may have received a previous notice directly from Fidelity.
If you received an official notice concerning the August 2024 data security incident, you should review it carefully.
You can also use the official settlement administrator’s information to ask whether you are included.
The settlement administrator listed on the official website can be contacted at:
Phone: 833-386-6470
Email: info@FidelityDataSettlement.com
The official settlement website should be used for the most current claim instructions.
Fidelity Data Breach Settlement Claim Deadline
The claim deadline was July 27, 2026.
The official settlement website states that online claims had to be submitted by July 27, 2026, while mailed claim forms had to be postmarked by that date.
Because today’s date is August 8, 2026, that deadline has passed.
Readers should not assume that a late claim will be accepted. Anyone who believes they missed the deadline should check the official settlement website or contact the settlement administrator to determine whether any extension or other procedure applies.
Fidelity Data Breach Settlement Final Approval
The settlement was subject to court approval.
The official settlement notice scheduled a Final Approval Hearing for July 9, 2026, at 2:00 p.m. Eastern Time in the U.S. District Court for the District of Massachusetts.
The official settlement website currently states that the court must decide whether to grant final approval.
Because the website’s current information still describes final approval as an outstanding issue, it is safer to say that the settlement was proposed and awaiting final court approval according to the settlement administrator’s current posted information, rather than claiming that the court has definitely approved it.
When Will Fidelity Data Breach Settlement Payments Be Sent?
The settlement FAQ says payments will be distributed if the court grants final approval and after any appeals are resolved.
The settlement administrator does not provide a guaranteed payment date.
That means even people who submitted valid claims should not assume that payments will arrive immediately after the claim deadline.
There may be additional legal proceedings before payments can be distributed.
What Happens If You Did Nothing?
The settlement website provides an important warning.
If you do nothing and remain in the settlement class, you will not receive a settlement benefit or payment.
You may also give up certain rights to sue Fidelity separately over the claims covered by the settlement.
The deadline to opt out was June 26, 2026, so that deadline has also passed.
What If You Opted Out?
People who validly opted out of the settlement do not receive settlement benefits.
However, opting out preserves the right to pursue an individual lawsuit concerning the legal claims covered by the settlement, subject to applicable law and other requirements.
The exclusion deadline was June 26, 2026.
Did Fidelity Admit Fault?
No.
The settlement documents expressly state that Fidelity denies wrongdoing.
The court also did not determine that Fidelity was legally responsible for the allegations simply because the parties agreed to settle.
The settlement was reached to avoid the costs, risks and uncertainty of continuing the litigation.
This is an important point when writing about the case.
A settlement should not automatically be described as proof that the defendant admitted liability.
Fidelity Data Breach Lawsuit Timeline
| Date | Event |
| August 17–19, 2024 | Unauthorized access occurred on Fidelity’s computer network |
| August 19, 2024 | Fidelity detected the incident and began responding |
| 2024 | Affected individuals were notified as required |
| 2024–2025 | Litigation developed around the data security incident |
| October 2024 | Federal data-breach litigation was reported in connection with the incident |
| February 10, 2025 | Class-action litigation was filed, according to case reporting |
| March 11, 2026 | Court granted preliminary approval to the proposed settlement |
| April 27, 2026 | Settlement notices began being mailed |
| June 26, 2026 | Deadline to object or opt out |
| July 9, 2026 | Final approval hearing scheduled |
| July 27, 2026 | Settlement claim deadline |
| August 2026 | Settlement administrator website remains the source for current settlement updates |
The official settlement documents identify the case as Case No. 1:24-CV-12601-LTS in the District of Massachusetts.
Is the Fidelity Data Breach Lawsuit a Class Action or Individual Lawsuit?
It is a class action.
The named plaintiffs brought the case on behalf of people who allegedly experienced similar harm from the same data security incident.
The settlement therefore applies according to a defined class rather than being a settlement for only the individuals who originally filed the complaint.
The court-approved notice explains that the class representatives are Richard Mason, Alexander Elterman, Ratiek Lowery, Robert Wilbert and John Nixon.
What Should Affected Fidelity Customers Do Now?
Because the July 27, 2026 claim deadline has passed, anyone who believes they were affected should first check the official settlement website for the latest status.
Do not pay a third party simply to submit a settlement claim.
The official settlement site provides the settlement administrator’s contact information and explains the claim process.
People should also be careful about phishing emails or fake settlement websites.
A legitimate settlement administrator will not require you to provide unnecessary sensitive information through an unverified website.
Frequently Asked Questions
What is the Fidelity Investments data breach lawsuit?
It is a federal class action concerning an August 2024 data security incident involving unauthorized access to certain information on Fidelity’s computer network.
When did the Fidelity data breach happen?
The incident occurred between August 17 and August 19, 2024, according to the official settlement documents.
What information was exposed?
Potentially affected information varied by individual and could include names, Social Security numbers, financial account information and driver’s license information.
How much is the Fidelity data breach settlement?
The proposed settlement establishes a $2.5 million settlement fund.
Can I get $5,000 from the Fidelity settlement?
Potentially, but only for qualifying documented monetary losses, subject to the settlement requirements. $5,000 is the maximum reimbursement for that category, not a guaranteed payment for every class member.
How much is the regular Fidelity settlement payment?
The settlement FAQ says the pro rata cash payment is expected to be approximately $100, although the final amount can be higher or lower depending on the number of claims and available funds.
Is the Fidelity settlement approved?
The official settlement website currently says the court still has to decide whether to grant final approval. The final approval hearing was scheduled for July 9, 2026.
When was the Fidelity settlement claim deadline?
The claim deadline was July 27, 2026.
Can I still file a Fidelity data breach claim?
The published deadline was July 27, 2026, which has passed. Check the official settlement website or contact the settlement administrator to determine whether any late-claim procedure is available.
Does Fidelity admit wrongdoing?
No. Fidelity denies wrongdoing, and the settlement does not itself establish that Fidelity was liable for the alleged data-security failures.
Is this the same as every Fidelity lawsuit?
No.
Fidelity Investments has been involved in other legal disputes unrelated to this data breach. A separate lawsuit should not be combined with this case simply because it involves the Fidelity name.
Bottom Line
The Fidelity Investments data breach lawsuit concerns an August 2024 cybersecurity incident in which an unauthorized third party accessed certain information on Fidelity’s computer network.
The resulting federal class action is In re: Fidelity Investments Data Breach Litigation, Case No. 1:24-CV-12601-LTS, in the U.S. District Court for the District of Massachusetts.
The parties reached a proposed $2.5 million settlement. Under the settlement terms, eligible class members may receive a pro rata cash payment expected to be around $100, while people with qualifying documented out-of-pocket losses may be eligible for reimbursement of up to $5,000. California residents may also qualify for a separate CCPA payment, and eligible class members can receive two years of identity-theft and credit-monitoring services.
However, these amounts should not be presented as guaranteed payments to everyone.
The published claim deadline was July 27, 2026, and the final approval hearing was scheduled for July 9, 2026. The settlement administrator’s current website still states that the court must decide whether to grant final approval, so readers should check the official settlement website for any post-hearing update before assuming that payments are being distributed.
For anyone researching the Fidelity Investments data breach lawsuit 2024, Fidelity Investments data breach lawsuit 2025, or the Fidelity data breach settlement, these are all part of the same core litigation concerning the August 2024 data security incident.
Legal Disclaimer
This article is for general informational purposes only and is not legal advice. Lawsuits, settlements, court orders, deadlines and payment procedures can change. Readers should verify the latest information through the official settlement administrator and consult a qualified attorney for advice about their individual circumstances.