UnknownFinanceMedium

Fidelity Investments

bd_b3720a09163c4a4f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 19, 2024

Filed

Oct 9, 2024

To disclose

7 weeks

Affected

77,099

Linked

10 filings

Confidence

95%

Full breach record for Fidelity Investments →98 incidents on file

Fidelity Investments reported a data breach to the Oregon Attorney General. The breach was reported on 2024-10-09. The breach occurred during 8/17/2024 - 8/19/2024. The breach was discovered on 8/19/2024. 77,099 individuals were affected. Notice was sent on 10/9/2024.

J jump to incidentP pin to compareR raw source

Oregon clock✗ OR AG >45d7 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 2 days

discovery → filing · 7 weeks / 51 days

Aug 17, 2024

Begins

Aug 19, 2024

Discovered

Oct 9, 2024

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

California State AGbd_77897170293356c72024-10-09Candidate
Washington State AGbd_78b327f683ac49352024-10-09Verified
New Hampshire State AGbd_c1a61cf0020059522024-10-09Verified
Maine State AGbd_d2abb4008659b4252024-10-09Verified

Show 5 more filings ↓up to 8d gap

Indiana State AGbd_f24c35fc28546ae62024-10-09Verified
Montana State AGbd_fa30fee34b59e35f2024-10-09Verified
Massachusetts State AGbd_ffdfabe1fcd7f5182024-10-09Verified
South Carolina State AGbd_c77a4454e517e3292024-10-14 · +5dVerified
Illinois State AGbd_98e888bf9c01efa42024-10-01 · +8dVerified

Name: Fidelity Investments
norm: fidelity investments
Domain: fidelity.com

Name: Fidelity Investments
norm: fidelity investments
Domain: fidelity.com

Discovered: Aug 19, 2024
Breach occurred: Aug 17, 2024 – Aug 19, 2024
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 9, 2024
Affected individuals: 77,099nationwide
Data types: —
Attack vector: Unknown

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: OR AG >45d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Illinois State AGOct 1 · first

California State AG+8d

Washington State AG+8d

New Hampshire State AG+8d

Maine State AG+8d

Indiana State AG+8d

Montana State AG+8d

Massachusetts State AG+8d

Oregon State AG+8d · this page

South Carolina State AG+13d

Pattern: first filing Oct 1 (IL), last Oct 14 (SC) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2024
Raw hash: 144181bc4bf89f1ebeb8ecc54b86fdf93156560b5424d3e35512433dfde23f46

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityFidelity Investments

Victim entityFidelity Investments

Incidentdiscovered Aug 19, 2024

ComplianceOR AG >45d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov