Eligible Fidelity Investments customers have until the end of July 27 to file a claim in a $2.5 million class-action settlement tied to a 2024 data breach. Customers who can document out-of-p
Eligible Fidelity Investments customers have until the end of July 27 to file a claim in a $2.5 million class-action settlement tied to a 2024 data breach.
Customers who can document out-of-pocket losses linked to the incident may receive up to $5,000.
Those without documented losses can still qualify for a pro rata cash payment, which court filings estimate could be around $100, depending on the number of claims submitted and settlement costs.
Related: Major wealth manager discloses Bitcoin, XRP holdings
The settlement stems from a cybersecurity incident that exposed the personal information of more than 77,000 Fidelity customers.
Plaintiffs alleged the financial services giant failed to adequately protect customer data and waited about two months before notifying affected users. Fidelity denied wrongdoing but agreed to settle the lawsuit.
Between Aug. 17 and Aug. 19, 2024, attackers accessed Fidelity's systems and obtained customer data, including account and routing numbers. The settlement covers people in the United States who received a notification from Fidelity that their information was exposed.
Claims for documented losses must relate to expenses incurred between Aug. 17, 2024, and July 27, 2026.
The Fidelity settlement comes as cybercriminals increasingly target platforms that hold sensitive financial data, including both traditional financial institutions and cryptocurrency companies.
Coinbase disclosed a separate customer data breach in May after attackers bribed a small group of overseas customer support contractors to access internal systems.
Brian Armstrong, chief executive officer of Coinbase Global Inc., during a television interview on Capitol Hill in Washington, DC.Getty Images
The crypto exchange said the attackers obtained customer information including names, home addresses, email addresses, phone numbers, government-issued identification documents and the last four digits of Social Security numbers for a small portion of users.
The company said the attackers intended to use the information to impersonate Coinbase and trick customers into handing over their crypto holdings.
Coinbase estimated the breach could cost between $180 million and $400 million in remediation expenses and customer reimbursements.
To qualify for compensation, customers must have received a notice from Fidelity stating they were affected by the company's Aug. 17-19, 2024, data breach or have had their account and routing numbers exposed during the incident.
Eligible customers can submit a claim online using the Login ID and PIN included in their settlement notice.
Those who cannot locate their credentials can request them from the settlement administrator by providing their full name and mailing address.
Claims may also be submitted by email or by mail to the Fidelity Data Security Incident Settlement administrator. Online and emailed claims must be filed by July 27, 2026, while mailed claims must be postmarked by the same date.
Customers seeking up to $5,000 must provide documentation, such as receipts or bank statements, showing losses tied to the breach.
Eligible expenses include identity theft or fraud losses, credit monitoring costs, replacement identification documents, postage and travel expenses incurred while resolving the incident.
Those without documented losses may still qualify for a pro rata cash payment, expected to be about $100.
