HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICFINANCIALLowContained
Fidelity Investments
bd_c1a61cf002005952 · schema v1 · pii pii-v1
Full breach record for Fidelity Investments →Fidelity Investments notified New Hampshire residents of a data breach occurring between August 17-19, 2024. A third party accessed customer information using two recently established customer accounts. Fidelity detected the activity on August 19, terminated access, and engaged external security experts. Affected individuals were offered credit monitoring services.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_77897170293356c7California State AGfiled 2024-10-09Candidate
- bd_78b327f683ac4935Washington State AGfiled 2024-10-09Verified
- bd_b3720a09163c4a4fOregon State AGfiled 2024-10-09Verified
- bd_d2abb4008659b425Maine State AGfiled 2024-10-09Verified
Show 2 more filings ↓Show fewer ↑
- bd_f24c35fc28546ae6Indiana State AGfiled 2024-10-09Verified
- bd_fa30fee34b59e35fMontana State AGfiled 2024-10-09Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/fidelity-investments-20241009.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 9, 2024
- Raw hash
- 3233620903159a19f948af9e067a69da328cfb391590717fab3b1e9c4af28c04
Reporting entity
- Name
- Fidelity Investmentsnorm: fidelity investments
- Domain
- fidelity.com
Victim entity
- Name
- Fidelity Investmentsnorm: fidelity investments
- Domain
- fidelity.com
Incident
- Discovered
- Aug 19, 2024
- Materiality determined
- —
- Notification sent
- Oct 9, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.