
If your data was caught in the Fidelity Investments breach, there's a $2.5 million settlement with your name on it — and you can claim a cash payment without sending in a single receipt.
Here's what happened. Between August 17 and August 19, 2024, an unauthorized third party got into Fidelity's network and walked off with the personal information of about 155,000 customers. Depending on the person, that data included names, Social Security numbers, financial account and routing numbers, and driver's license details — the exact information someone needs to open accounts in your name.
Five customers — Richard Mason, Alexander Elterman, Ratiek Lowery, Robert Wilbert, and John Nixon — sued. The cases were consolidated on February 10, 2025 into In re: Fidelity Investments Data Breach Litigation, Case No. 1:24-CV-12601-LTS, in the U.S. District Court for the District of Massachusetts, before Judge Leo T. Sorokin. The claimants are represented by A. Brooke Murphy of Murphy Law Firm and Lori G. Feldman of Hecht Partners LLP.
The lawsuit makes seven legal claims — negligence, breach of implied contract, breach of the implied covenant of good faith and fair dealing, breach of fiduciary duty, unjust enrichment, violation of the Massachusetts Consumer Protection Act, and violation of the California Consumer Privacy Act. The throughline: Fidelity promised to guard your data and the suit says it didn't use reasonable security to do it. You can read the full filings at FidelityDataSettlement.com.
What makes this one sting: Fidelity isn't a small shop — the complaint notes it pulled in over $28.2 billion in revenue in 2023 and holds roughly $15 trillion in assets under administration. The suit argues a company that size could have prevented a breach that, by its own account, lasted just three days (August 17–19, 2024).
Fidelity has agreed to a $2,500,000 settlement fund to close out the data breach case. Every dollar gets used — it's non-reversionary, so nothing goes back to Fidelity. The fund first covers court-approved attorneys' fees and costs, service awards, and administration; the rest pays you and the other claimants in cash. Any money left after a first round of payments gets redistributed to claimants, and only if a second round would come to less than $5.00 per person does the remainder go to the National Cybersecurity Alliance.
You're covered if you're a U.S. resident Fidelity notified about the August 2024 breach, or if your financial account and routing numbers were exposed in it. One catch worth knowing: if you and someone else share a single account and routing number, only one claim is allowed between you — not one each.
On top of the cash, every claimant can enroll in two years of CyEx Financial Shield Complete — identity-theft protection with $1 million in fraud insurance and dark-web monitoring, at no cost.
Behind the number: this deal didn't come easy. The two sides went to a full-day mediation before retired federal judge Hon. Wayne Andersen of JAMS on October 23, 2025, and walked away without a deal — they kept negotiating for days afterward before landing the $2.5 million agreement.
To claim, file by the claim deadline. The court holds its final approval hearing on July 9, 2026.
How much will you get? Every claimant can take a cash payment estimated at $100 with no proof and no paperwork — that figure can move up or down depending on how many people file. If you live in California, you can add a $50 CCPA payment on top. And if the breach cost you real money, you can claim reimbursement for documented out-of-pocket losses up to $5,000 — with receipts or statements — for anything you spent between August 17, 2024 and July 27, 2026 dealing with fraud or identity theft.
Separately, every claimant can enroll in two years of free CyEx Financial Shield Complete credit monitoring, backed by $1 million in fraud insurance.
The complaint describes how stolen names, SSNs, and bank numbers get bundled into "Fullz" packages — complete identity kits sold on the dark web — and several of the named plaintiffs say their information was already posted there after the breach. If that exposure cost you money, the documented-loss track is how you get it back.
Now the honest part on timing: nobody gets paid until the court grants final approval at the July 9, 2026 hearing, and any appeals are resolved after that — so this is weeks-to-months, not days. When you file, you pick how you get paid: PayPal, Venmo, Zelle, a virtual prepaid card, or a mailed check. Checks stay good for 60 days. If your payment doesn't show, call the Settlement Administrator at 1-(833) 386-6470.
When you claim with Chimo, you have free lifetime access to print and mail your own claim.


You can claim if you're a U.S. resident whose information was exposed in Fidelity's August 2024 breach — either Fidelity mailed you a notice, or your account and routing numbers were among the data taken.
The claim form asks you to: (1) give your name and contact info; (2) check the box for credit monitoring; (3) list any documented losses with a description and amount; (4) claim the ~$100 cash payment; (5) claim the $50 CCPA payment if you're a California resident; (6) pick how you want to get paid; and (7) sign under penalty of perjury.
One thing that trips people up: joint accountholders who shared a single account and routing number get one claim between them — not one each. Sort out who files before the deadline.
Fidelity agreed to a $2,500,000 fund, and none of it goes back to Fidelity. After fees, costs, service awards, and administration, the rest pays claimants. Every person who files can claim an estimated $100 in cash with no proof.
Over three days, August 17–19, 2024, an unauthorized third party got into Fidelity's network and took customer data — names, Social Security numbers, financial account and routing numbers, and driver's license info — for about 155,000 people. Several named plaintiffs say they later found their information on the dark web; one had to shut down a PayPal account after someone tried to break in.
You can claim a cash payment estimated at $100 with no documentation. The number can rise or fall based on how many people file. California residents can add a separate $50 CCPA payment.
Because the lawsuit included a claim under the California Consumer Privacy Act, which gives California residents their own data-protection rights. The $50 covers that California-only claim, on top of the cash everyone else gets.
Yes. If you had documented out-of-pocket losses from fraud or identity theft tied to the breach between August 17, 2024 and July 27, 2026, you can claim up to $5,000 — with proof like bank statements or receipts.
Every claimant can enroll in two years of CyEx Financial Shield Complete: $1 million in fraud insurance, dark-web monitoring, alerts on suspicious financial activity, and a real fraud resolution agent if something goes wrong.
Class Counsel will ask the court for up to one-third of the $2.5 million fund — about $833,000 — plus up to $45,000 in costs. Each of the five people who brought the case can receive a $2,500 service award.
No. If you share a single financial account number and routing number, only one claim is allowed between you. Decide who files before July 27, 2026.
It gets redistributed to people who did file. Only if a second round would come to less than $5.00 per person does the leftover go to the National Cybersecurity Alliance instead.