If you were affected by Fidelity’s August 2024 data breach, you can claim up to $5,000 in compensation through a $2.5 million class action settlement, but only if you file by July 27, 2026. The deadline is firm, and missing it means forfeiting your right to any payout. A Fidelity customer who received account numbers in the breach notification, for instance, can file a claim for up to $5,000 to cover documented losses like identity theft monitoring or credit report disputes directly tied to the breach.
The settlement applies to U.S. citizens who were notified of the breach by Fidelity, as well as anyone whose account and routing numbers were exposed—even if Fidelity didn’t send them a notification. The breach itself occurred during a three-day window on August 17–19, 2024, when attackers accessed customer names, Social Security numbers, financial account and routing numbers, and driver’s license information for thousands of accounts.
Table of Contents
- What Triggered the $2.5 Million Fidelity Settlement?
- Understanding Your Breach Exposure: Names, SSNs, Account Numbers, and More
- Settlement Payout Structure: $100 Base Payment Plus Additional Compensation
- How to File Your Claim Before the July 27, 2026 Deadline
- Critical Pitfalls: Missing Documentation and Timing
- Credit Monitoring and Fraud Insurance: A Secondary Layer of Protection
- Who Is Eligible and Common Questions About Notification Status
What Triggered the $2.5 Million Fidelity Settlement?
Between August 17 and August 19, 2024, Fidelity suffered a cyberattack that exposed sensitive personal and financial data for a subset of its customer base. The compromised information included names, full Social security numbers, bank account numbers, routing numbers, and driver’s license details—the kind of data that opens the door to identity theft, unauthorized wire transfers, and fraud.
Fidelity notified affected customers of the breach and subsequently reached a settlement agreement for $2.5 million to compensate those harmed. This settlement represents an acknowledgment of the security failure and Fidelity’s liability for the breach. Unlike some settlements that distribute millions among thousands of claimants and result in payouts under $10 per person, this agreement caps individual awards at $5,000 for documented losses, which is a meaningful figure for customers who experienced actual financial harm or had to spend time and money remediating identity theft.
Understanding Your Breach Exposure: Names, SSNs, Account Numbers, and More
The data exposed in the August 2024 breach represents a complete identity theft toolkit: the combination of a Social Security number with a name, driver’s license number, and bank account details gives criminals nearly everything required to open fraudulent accounts, file false tax returns, or initiate unauthorized transfers. A customer whose routing and account numbers were leaked, for example, faces real risk of ACH fraud—someone initiating unauthorized automatic payments from their bank account in the attacker’s name.
The scope of what was stolen makes this breach worse than one that compromises email addresses alone. Driver’s license numbers, in particular, are rarely requested by legitimate institutions online, and their presence in the breach data signals attackers accessed a deeper layer of Fidelity’s customer records than might initially appear. For identity theft victims, the cost of resolution—credit monitoring services, fraud affidavit filing, credit report disputes, and potential wages lost to hours spent on the phone with banks—can easily exceed several hundred dollars.
Settlement Payout Structure: $100 Base Payment Plus Additional Compensation
Every eligible claimant receives a base one-time payment of approximately $100 with no documentation required—this is an automatic acknowledgment of harm. Beyond that, you can claim up to $5,000 to cover documented out-of-pocket losses directly resulting from the breach. If you paid for credit monitoring services, hired a lawyer to dispute fraudulent accounts, or lost wages investigating unauthorized transactions, those losses can be submitted as proof.
California residents receive an additional flat $50 payment under the California Consumer Privacy Act, reflecting California’s stricter privacy regulations. If you received a credit monitoring offer as part of the settlement, the company providing that service—CyEx Financial Shield Complete—covers two years of credit monitoring with $1 million in financial fraud insurance bundled in. This coverage is separate from any cash payout you claim; you receive both the monetary settlement and the monitoring service.
How to File Your Claim Before the July 27, 2026 Deadline
Filing a claim is straightforward but requires action before the firm deadline. You can file online at FidelityDataSettlement.com/form/claim, which is the fastest route to processing. Alternatively, you can print and mail a signed claim form, but it must be postmarked by July 27, 2026—a postal delay that arrives even one day later invalidates the claim.
There is no grace period, no extensions, and no exception for mail delays beyond July 27. For claims under $100, you typically need no documentation beyond your name, Fidelity account information, and confirmation that you were affected. For claims above $100 (seeking the additional $5,000 for documented losses), you must provide receipts or proof of expense—credit card statements showing charges for identity theft protection services, medical bills if fraud caused you to spend time at a lawyer’s office, or bank records showing unauthorized transactions you had to dispute. Fidelity or the claims administrator will review your documentation and either approve, reduce, or deny the claim based on what you provide.
Critical Pitfalls: Missing Documentation and Timing
The most common reason claims are denied or reduced is insufficient documentation. If you paid $500 for a credit monitoring subscription and want to claim that cost, the claims administrator needs your credit card statement or a bank statement showing the charge. Generic statements like “I spent money on identity theft protection” without a receipt or invoice will not be accepted. Similarly, if you claim lost wages, you need pay stubs or a letter from your employer stating how many hours you spent away from work and what those hours cost in lost income. Another critical pitfall is confusing the deadline.
July 27, 2026 is the deadline for claim forms to be *postmarked* if mailing, or *submitted* if filing online. Many class action settlement notices use language like “received by” or “date stamped” which can be ambiguous. Here, the rules are clear: online submission must go through the website by 11:59 p.m. on July 27, 2026, and mailed forms must have a postmark date of July 27, 2026 or earlier. A form that arrives on your doorstep on July 28 but postmarked July 27 will be accepted; a form postmarked July 28 will not.
Credit Monitoring and Fraud Insurance: A Secondary Layer of Protection
Beyond cash compensation, all eligible claimants are entitled to enroll in CyEx Financial Shield Complete credit monitoring for two years. This service continuously monitors your credit file for suspicious activity, which is particularly valuable after a breach that exposed your SSN and financial account numbers. The $1 million financial fraud insurance included with the monitoring covers certain losses related to identity theft, though the policy terms define what qualifies (typically unauthorized credit card charges, fraudulent loans opened in your name, and unauthorized account takeovers, but usually excluding things like tax fraud or business identity theft).
The credit monitoring enrollment is not automatic; you must sign up for it separately from your cash claim. If you already have credit monitoring from another source or through your employer, you can decline this benefit, but signing up costs you nothing and provides an additional safeguard. Two years of monitoring is not a permanent solution—after the coverage ends, you revert to whatever credit monitoring you arrange independently—but it covers the period when identity theft risk is highest following a breach.
Who Is Eligible and Common Questions About Notification Status
You are eligible if you are a U.S. citizen and were notified of the breach by Fidelity, or if your account and routing numbers were exposed even if you didn’t receive a Fidelity breach notification. This second criterion is important because some customers with exposed data may have moved, changed contact information, or had accounts that were inactive at the time of notification.
If Fidelity’s records show your account number and routing number in the compromised data, you are entitled to claim, regardless of whether the company successfully reached you. If you are unsure whether you were affected, the FidelityDataSettlement.com website allows you to search by account number or other identifying information. You can also contact the claims administrator directly by phone or mail. The eligibility determination is handled by the claims administrator, not Fidelity, which prevents Fidelity from deciding who qualifies—an important check in the settlement structure that protects claimants.
- —