See if you qualify for Fidelity's $2.5M data breach settlement and learn how to fight identity theft

If you're a Fidelity Investments customer, you may be eligible for a payment of as much as $5,000 stemming from a recent data breach settlement. But the deadline to file a valid claim in the $2.5 million deal is just days away.

Fidelity and its subsidiary Fidelity Brokerage Services agreed to the deal on May 13, closing the door on a lawsuit alleging the investment giant failed to both adequately prevent a cyberattack and alert members to its existence after the fact.

The last chance to submit a claim is Monday, July 27, 2026.

In their complaint, the plaintiffs alleged that Fidelity detected suspicious activity on its network between Aug. 17 and 19, 2024, but waited almost two months before notifying customers. Calling the breach "preventable," they claimed Fidelity's "inadequately secured computer systems" allowed the attackers to gain entry.

Fidelity has denied any wrongdoing but said it agreed to settle because of "the uncertainty and risks inherent in any litigation."

"We remain fully committed to the security of our clients' accounts and personal information," the company told CNBC Select in a statement. "Litigation can involve a considerable amount of time and resources, [and] a settlement is one way to avoid this for both parties."

Here's what you need to know about Fidelity's $2.5 million settlement, including who is eligible, how to file a claim and what to do if you're the victim of a data breach.

Class members could number more than 160,000, including those notified of the breach and others whose bank account and routing numbers were allegedly exposed.

If you're not sure whether you are a class member, you can go to the settlement website, email info@FidelityDataSettlement.com or call 833-386-6470.

You can also contact the settlement administrator at:

Fidelity Data Security Incident Settlement
c/o Settlement Administrator
P.O. Box 25226
Santa Ana, CA 
92799-9958

Eligible class action members may receive up to $5,000, depending on the nature of their losses.

• Reimbursement of documented losses: You could receive up to $5,000 if you can document out-of-pocket losses incurred between Aug. 17, 2024, and July 27, 2026, resulting from the breach, including fraud and time spent restoring your identity.
  
• Pro rata cash payment: Members of the class without proof or explanation may be eligible for payments of approximately $100, although the actual amount will depend on the number of class members and other legal costs
  
• California Consumer Privacy Act (CCPA): California residents may be eligible for an additional $50 payment. 
  
• Credit monitoring services: Class members can also claim two years of free credit monitoring from CyEx, including $1 million in fraud and identity theft insurance.

To receive a payment from the settlement, you must submit a valid claim by July 27, 2026. You can file online here or download the claim form and mail it to the settlement administrator.  

The deadline to be excluded from the settlement was June 26, 2026.

The settlement was approved in a final fairness hearing on July 9, 2026. If there are no appeals, attorneys' fees and the lead plaintiffs will be paid first.

The remaining funds will then be distributed among other class members who have submitted valid forms.  

In most cases, advice about identity theft is reactive:

1. Place fraud alerts with Experian, Equifax and TransUnion.
2. Review your bank and credit card statements for suspicious activity.
3. Freeze your credit to prevent new accounts from being opened in your name.
4. Report identity theft to the Federal Trade Commission and local law enforcement.
5. Keep records of all communications and fraudulent transactions.
6. At least once every six months, review your credit reports for signs of suspicious activity. 

• Your credit card company or bank should provide updated credit score information for free.
• You can get free copies of your reports from each of the three major bureaus at AnnualCreditReport.com.
• You can get a free credit report from Experian every 30 days and CreditWise from Capital One provides free access to your TransUnion credit report. Equifax offers two free credit reports per year with myEquifax.
• For regular updates on all three reports, consider subscribing to a paid identity theft protection service like PrivacyGuard® or Experian IdentityWorks℠. 

There are some proactive measures you can take, though, like getting a password manager that can help keep your usernames, passwords and email addresses under lock and key. Services like Keeper and Dashlane add dark web monitoring and email masking.

Even if you're not the victim of an attack, freezing your credit reports prevents anyone from opening a new account in your name. There is no harm to your credit score or existing accounts, and you can unfreeze your accounts whenever you want to apply for a credit card or loan.

• Equifax: Visit the Equifax Consumer Services Center or call 800-349-9960.
• Experian: Contact Experian's security freeze center or call 888-397-3742.
• TransUnion: Visit the TransUnion website or call 888-909-8872.

Identity monitoring service Aura will freeze your credit without requiring you to contact the credit bureaus. It also offers a range of other security features, including a password generator, email aliases, a VPN, robocall filters and malware protection. 

Why trust CNBC Select?

At CNBC Select, our mission is to provide our readers with high-quality service journalism and comprehensive consumer advice so they can make informed financial decisions. Every cybersecurity article is based on rigorous reporting by our team of expert writers and editors. While CNBC Select earns a commission from affiliate partners on many offers and links, we create all our content without input from our commercial team or any outside third parties, and we pride ourselves on our journalistic standards and ethics.

Catch up on CNBC Select's in-depth coverage of credit cards, banking and money, and follow us on TikTok, Facebook, Instagram and Twitter to stay up to date.