Fidelity reports data breach exposing 77,000 customers' personal data

Fidelity reports data breach exposing 77,000 customers' personal data
The investment giant said Social Security numbers, driver's licenses, and other sensitive information was compromised by a third party using newly established accounts.
OCT 10, 2024

Fidelity Investments has confirmed a significant data breach affecting tens of thousands of its customers, exposing sensitive personal information, including Social Security numbers and driver’s licenses.

The breach, which occurred in August, was disclosed in regulatory filings with the attorney generals of Maine, New Hampshire, and Massachusetts.

According to its filing submitted to Maine’s attorney general on Wednesday, Fidelity stated that the breach took place between August 17 and August 19, when an unnamed third party gained access to the data through two customer accounts.

It remains unclear how an external actor could have gained access to its broad database of customer information by setting up user accounts.

“We detected this activity on August 19 and immediately took steps to terminate the access,” Fidelity said in a letter giving notice to its impacted customers. The firm emphasized that no Fidelity customer accounts were accessed as part of the incident.

The Boston-based investment giant completed its investigation and confirmed that personal information was compromised, impacting 77,099 individuals.

A separate data breach notice filed with New Hampshire’s attorney general revealed that the attackers “accessed and retrieved certain documents” related to customers through fraudulent requests to an internal database. This database contained images of various documents tied to Fidelity customers and other individuals.

Meanwhile, a data breach report maintained by the government of Massachussets shows Fidelity reporting an incident that impacted 2,768 residents of the state, which compromised Social Security Numbers, financial accounts and drivers licenses.

As of Thursday afternoon, the company's website had not made any public declarations about the incident. The firm has not provided specific information on whether any of the stolen data has been misused.

Separately, Fidelity recently announced it would restrict third parties' access to retirement accounts via credential sharing, particularly fintech firms that use it to access, manage, and trade within their clients' employer-sponsored retirement accounts.

Fidelity, one of the largest asset managers globally, serves over 51 million individual investors and manages approximately $14.1 trillion in customer assets as of June 2024. It remains unclear whether the company plans to release additional details or updates on this breach.

 

Latest News

Buy or sell Canada? Wealth managers watch carefully as Canadians head to the polls
Buy or sell Canada? Wealth managers watch carefully as Canadians head to the polls

Canadian stocks are on a roll in 2025 as the country prepares to name a new Prime Minister.

How are tech-boosted advisors spending their "time tax refund"?
How are tech-boosted advisors spending their "time tax refund"?

Two C-level leaders reveal the new time-saving tools they've implemented and what advisors are doing with their newly freed-up hours.

Indivisible Partners selects DPL to arm advisors for insurance business
Indivisible Partners selects DPL to arm advisors for insurance business

The RIA led by Merrill Lynch veteran John Thiel is helping its advisors take part in the growing trend toward fee-based annuities.

RIA M&A stays brisk in first quarter with record pace of dealmaking
RIA M&A stays brisk in first quarter with record pace of dealmaking

Driven by robust transaction activity amid market turbulence and increased focus on billion-dollar plus targets, Echelon Partners expects another all-time high in 2025.

New York Dems push for return of tax on stock sales
New York Dems push for return of tax on stock sales

The looming threat of federal funding cuts to state and local governments has lawmakers weighing a levy that was phased out in 1981.

SPONSORED Compliance in real time: Technology's expanding role in RIA oversight

RIAs face rising regulatory pressure in 2025. Forward-looking firms are responding with embedded technology, not more paperwork.

SPONSORED Advisory firms confront crossroads amid historic wealth transfer

As inheritances are set to reshape client portfolios and next-gen heirs demand digital-first experiences, firms are retooling their wealth tech stacks and succession models in real time.