Fidelity Investments Details

    Organization Logo

    Fidelity Investments

    Boston, Massachusetts • employees • Financial Services

    Industry

    Financial Services

    Security Incidents

    2

    Fidelity Investments, formerly known as Fidelity Management & Research, is an American multinational financial services corporation based in Boston, Massachusetts.

    Security Incidents

    Fidelity Investments Breach of Aug 2024
    Severity Score
    Moderate

    Type

    Data Breach

    Summary

    In August 2024, Fidelity Investments experienced a data breach affecting over 77,000 individuals. Between August 17 and 19, unauthorized access was gained to two customer accounts, allowing attackers to exfiltrate personal information stored in an internal database. Although the breach did not involve access to customer accounts or financial assets, personal identifiers such as social security numbers and driver's licenses were compromised in certain states, as disclosed to local attorney generals.

    Upon discovering the breach on August 19, Fidelity responded promptly by terminating access and...
    Show more

    Severity

    In August, Fidelity Investments experienced its second major data breach of the year, affecting over 77,000 customers when attackers accessed personal information through two customer accounts that had just been established. Although financial accounts and funds were not compromised, the breach raised significant concerns about the security of personal data, amplifying risks of identity theft and fraud. Given that Fidelity promptly detected and terminated the unauthorized access, and no misuse of personal information has been reported, the severity of the incident can be rated as a "Moderate" ...
    Show more

    Impact

    In August of 2024, Fidelity Investments experienced a data breach where a third-party actor accessed two recently established customer accounts over a two-day period, from August 17 to August 19. This intrusion compromised the personal data of over 77,000 customers. The attack did not involve ransomware and was limited to obtaining personal information; Fidelity reassures that no customer accounts or funds were directly accessed or compromised. Nonetheless, the data breach did expose sensitive identifiers, including social security numbers and driver's licenses for some customers, raising conc...
    Show more
    Fidelity Investments Breach of Nov 2023
    Severity Score
    Low

    Type

    Unknown

    Summary

    In November 2023, Fidelity National Financial, a real estate services company, faced a ransomware attack causing panic among homeowners and buyers. The cyberattack led to disruptions in services related to title insurance, escrow, and mortgage transactions. FNF took measures to block access to certain systems, resulting in business disruptions. The incident was confirmed to be under control by November 26, and normal business operations were being restored. FNF shut down its network and systems to contain the cybersecurity incident, launched an investigation, and implemented measures to assess...
    Show more

    Severity

    The Fidelity National Financial cyber security incident in November 2023, attributed to the BlackCat ransomware gang, was severe as it exposed the data of 1.3 million people. The attack led to disruptions in Fidelity National Financial's systems and services, impacting their operations and potentially compromising sensitive information.

    Impact

    The breach at Fidelity National Financial had a significant impact on their services related to title insurance, escrow, mortgage transactions, and technology for the real estate and mortgage industries. Homeowners, buyers, and customers were affected by the ransomware attack, causing panic and uncertainty among those using Fidelity National Financial's services.

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos