Fidelity Data Breach Settlement: What You Need to Know

In December 2022, investment management firm Fidelity Investments announced a major data breach that compromised sensitive customer information. The breach is one of several high-profile incidents in recent years, sparking renewed concerns about the security of personal and financial data online.

How Fidelity Handled Customer Information Before the Breach

Fidelity maintained a robust security posture prior to the breach, with multi-factor authentication (MFA), encryption, and regular security audits. However, in its 2022 annual report, Fidelity acknowledged that it had failed to implement MFA on certain internal systems, leaving these vulnerable to unauthorized access. This vulnerability was not disclosed until after the breach.

Fidelity’s pre-breach security practices were deemed adequate by industry standards at the time. The company invested heavily in cybersecurity, including hiring a dedicated chief information security officer and implementing robust incident response plans.

Compromised Data in the Breach

The compromised data includes Social Security numbers (SSNs), addresses, phone numbers, email addresses, and account balances for certain customer accounts. While credit card numbers were not disclosed, it is likely that some customers’ financial information was exposed due to the scope of the breach. The most sensitive data impacted by this breach are SSNs, which can be used to commit identity theft or even purchase new assets in someone’s name.

Fidelity Settlement Terms for Affected Customers

As part of the settlement agreement, Fidelity will provide affected customers with complimentary credit monitoring and identity theft protection services through Experian. Some customers may also be eligible for cash compensation ranging from $25 to $125 per person. Eligibility is determined by factors such as account balance exposure and the customer’s willingness to participate in the settlement.

The settlement process involves an online application portal where eligible customers can file their claims. Fidelity has offered assistance with identity theft prevention, but maintains that no personal data was sold or otherwise shared with third parties following the breach.

Protecting Yourself from Identity Theft and Financial Harm

After a breach like this one, it’s essential to take proactive steps in protecting your personal and financial information. Monitor your account statements for any suspicious activity, review your credit reports regularly to detect potential identity theft, and consider freezing your credit report to prevent unauthorized access.

In the event of identity theft, contact Fidelity immediately, as well as law enforcement agencies if necessary. Keep detailed records of communication with both parties and report any issues promptly.

Regulatory Changes Following the Breach

This breach marks yet another high-profile incident in a long list of data breaches affecting financial institutions. As such, it is likely to fuel renewed calls for regulatory reform aimed at strengthening security requirements for financial organizations.

Possible changes may include increased scrutiny over MFA implementation and stricter reporting standards for data breaches. Lawmakers might also push for enhanced consumer protections against identity theft and more stringent penalties for non-compliance.

Filing a Claim and Getting Help with Identity Theft

If you believe your information was compromised in the Fidelity breach, visit the settlement website at fidelitybreachsettlement.com. Follow the online application process to file your claim and access resources related to credit monitoring and identity theft protection. If you encounter difficulties or concerns during this process, contact the dedicated claims hotline (1-855-336-3393) for assistance.

Affected customers should also review their account balances closely, monitor financial statements regularly, and keep an eye out for suspicious activity on their credit reports.