If you were a Fidelity Investments customer whose personal information was exposed in the company’s August 2024 data breach, you are covered by a $2.5 million class action settlement — but the window to claim your share is nearly closed. The claim deadline is July 27, 2026, just four days away. The settlement, reached in *In re: Fidelity Investments Data Breach Litigation*, No. 1:24-cv-12601-LTS, in the U.S.
District Court for the District of Massachusetts, received final approval after a fairness hearing held on July 9, 2026. Eligible class members can file at FidelityDataSettlement.com. The money at stake is not trivial. Class members with documented out-of-pocket losses tied to the breach can recover up to $5,000, while those without documentation can still claim a cash payment of approximately $100, plus two years of identity theft protection. Consider a customer who spent $300 on credit freezes, notary fees, and hours disputing a fraudulent account opened with a stolen Social Security number in late 2024 — with receipts, that person can seek full reimbursement rather than settling for the flat payment.
Table of Contents
- What Happened in the Fidelity Investments Data Breach, and Whose Information Was Exposed?
- How the $2.5 Million Settlement Fund Is Divided
- Why the Credit Monitoring Benefit Matters as Much as the Cash
- How to File a Claim Before the July 27, 2026 Deadline
- What Happens If You Don’t File — and Other Common Pitfalls
- How This Settlement Compares to Other Data Breach Payouts
- The Litigation Behind the Settlement
- Frequently Asked Questions
What Happened in the Fidelity Investments Data Breach, and Whose Information Was Exposed?
The breach occurred between August 17 and 19, 2024, when a third party gained access to Fidelity’s network through an unusual route: two fraudulently created customer accounts. Using that foothold, the intruder obtained customer data files without authorization. Unlike breaches caused by malware planted deep inside corporate servers, this one exploited the ordinary account-creation process — a reminder that attackers do not always need sophisticated tools to reach sensitive records. About 77,099 individuals had data exposed in the incident, including names, Social Security numbers, driver’s license numbers, and financial account information.
The settlement also covers roughly 86,000 additional customers whose bank account and routing numbers were exposed, bringing the total covered population to more than 160,000 people. For comparison, that is a small fraction of Fidelity’s tens of millions of customers, but the data involved — Social Security numbers paired with financial account details — is among the most damaging combinations that can fall into criminal hands. Fidelity denies any wrongdoing. As is typical in data breach settlements, the company agreed to pay $2.5 million to resolve the claims without admitting liability, and the court’s final approval means the settlement terms are now binding on the class.
How the $2.5 Million Settlement Fund Is Divided
The settlement offers tiered compensation. The largest payments — up to $5,000 per person — go to class members who can document out-of-pocket losses fairly traceable to the breach. Qualifying expenses typically include unreimbursed fraud losses, fees for credit freezes or credit reports, bank fees, and costs incurred dealing with identity theft. Documentation is the operative word: claims in this tier require receipts, statements, or similar proof, and the settlement administrator can reject expenses that are not reasonably connected to the breach. Class members without documented losses can claim a cash payment of approximately $100.
There is an important limitation here: that figure is subject to pro-rata adjustment based on claim volume. If more people file than the $2.5 million fund can support at the stated amounts, individual payments shrink proportionally. Conversely, low participation can push payments up. Anyone counting on exactly $100 should treat the number as an estimate, not a guarantee. California residents get one extra benefit: an additional $50 statutory payment, reflecting the stronger privacy protections California law affords its residents. All class members, regardless of state, are also entitled to two years of identity theft protection and credit monitoring.
Why the Credit Monitoring Benefit Matters as Much as the Cash
The two years of identity theft protection included in the settlement may prove more valuable over time than the cash payment. Social Security numbers do not expire, and stolen identity data is often sold and resold on criminal marketplaces months or years after a breach.
A fraudster who bought exposed Fidelity customer data in 2025 could attempt to open accounts in a victim’s name well into 2027 — squarely within the monitoring window the settlement provides. Comparable services purchased retail typically run $10 to $30 per month, meaning the monitoring benefit alone can be worth $240 to $720 over two years. For example, a class member who takes the roughly $100 cash payment and enrolls in the monitoring effectively receives several hundred dollars in total value — but only if they actually complete the enrollment, which usually requires an activation step after the claim is processed.
How to File a Claim Before the July 27, 2026 Deadline
Claims must be filed at FidelityDataSettlement.com by July 27, 2026. Class members typically received a notice with a claim ID, which streamlines the online form; those who lost their notice can usually contact the settlement administrator through the site to look up their eligibility. Filing online takes minutes for the flat cash payment. Documented-loss claims take longer because supporting records must be gathered and uploaded.
There is a real tradeoff to weigh under this time pressure. If you have losses but cannot assemble complete documentation in four days, you face a choice: file for the documented-loss tier with whatever proof you have and risk partial rejection, or file for the guaranteed-but-smaller flat payment. What you should not do is miss the deadline entirely while deciding — a claim filed for the lower tier is worth more than a perfect claim filed too late. The settlement site’s dates page at fidelitydatasettlement.com/dates confirms the operative deadlines.
What Happens If You Don’t File — and Other Common Pitfalls
The consequences of inaction are absolute. Class members who do not file by the deadline receive nothing and forfeit the right to sue Fidelity over the same claims. Because the court granted final approval on July 9, 2026, the release of claims will bind everyone in the class who did not previously opt out, whether or not they ever submit a claim form or cash a check.
📨 Get Free Mass Tort Guides Alerts
Free · No spam · Unsubscribe anytime
Someone who discovers identity theft traceable to this breach in 2027 will have no recourse against Fidelity if they sat out the settlement. Another pitfall is settlement-related scams. Data breach settlements reliably attract fraudsters who email or call victims posing as administrators and asking for Social Security numbers, bank logins, or a “processing fee.” The legitimate administrator will never charge a fee to file a claim. Use only the official site, FidelityDataSettlement.com, and be skeptical of unsolicited messages about the settlement — particularly ironic but common, given that the underlying case is itself about stolen personal data.
How This Settlement Compares to Other Data Breach Payouts
At $2.5 million for a class of roughly 160,000 people, the Fidelity settlement works out to about $15 per person if every class member filed — which is why the actual payment amounts depend so heavily on claim rates, which in data breach cases often run well below 10 percent. By contrast, the 2017 Equifax breach settlement created a fund of hundreds of millions of dollars but covered 147 million people, and many claimants ultimately received small payments after pro-rata reductions. Smaller classes like Fidelity’s tend to produce more meaningful individual recoveries, especially for the low percentage of members who file documented-loss claims.
The Litigation Behind the Settlement
The consolidated case, *In re: Fidelity Investments Data Breach Litigation*, was filed in the U.S. District Court for the District of Massachusetts — Fidelity’s home jurisdiction, as the company is headquartered in Boston — under case number 1:24-cv-12601-LTS.
Plaintiffs alleged Fidelity failed to adequately safeguard customer data, allowing the August 2024 intrusion through the fraudulently created accounts. Fidelity denied the allegations, and the settlement resolves the claims without any finding of fault. Coverage of the settlement and filing process has appeared in outlets including CNBC Select, Yahoo Finance, and NBC Chicago, all of which flagged the approaching July 27 deadline and the up-to-$5,000 reimbursement tier.
Frequently Asked Questions
Who is covered by the Fidelity data breach settlement?
About 77,099 people whose names, Social Security numbers, driver’s license numbers, or financial account information were exposed in the August 17–19, 2024 breach, plus roughly 86,000 additional customers whose bank account and routing numbers were exposed.
How much can I receive?
Up to $5,000 for documented out-of-pocket losses, or approximately $100 without documentation (subject to pro-rata adjustment). California residents may receive an extra $50, and all class members get two years of identity theft protection.
When is the claim deadline?
July 27, 2026. Claims must be filed at FidelityDataSettlement.com by that date.
Has the settlement been approved?
Yes. The court held a final fairness hearing on July 9, 2026, and granted final approval.
What happens if I don’t file a claim?
You receive nothing and give up the right to sue Fidelity over the same breach-related claims.
Did Fidelity admit fault?
No. Fidelity denies wrongdoing; the $2.5 million settlement resolves the case without any admission of liability.
You Might Also Like
- Comcast Data Breach Settlement Covers Customers Affected by Security Incident
- Cadence Bank MOVEit Data Breach Settlement Offers Payments for Exposed Customer Data
- Sprouts Farmers Market Receipt Settlement Claims Customers Received Noncompliant Card Receipts