Over 77,000 customers' personal information is exposed in Fidelity Investments data breach

Fidelity Investments is the latest American institution to beryllium deed by a massive information breach. 

The institution is 1 of the world’s largest plus managers, yet it inactive can't get its cybersecurity infrastructure together.

While nary Fidelity accounts were compromised, personal information was exposed, including Social Security numbers and driver’s licenses.

GET SECURITY ALERTS, EXPERT TIPS — SIGN UP FOR KURT’S NEWSLETTER — THE CYBERGUY REPORT HERE

Illustration of a hacker connected a laptop. (Kurt "CyberGuy" Knutsson)

What happened?

Fidelity Investments reported successful a filing with Maine’s lawyer general that an unnamed 3rd enactment accessed accusation from its systems utilizing 2 precocious established lawsuit accounts. It did not accidental however the instauration of 2 Fidelity lawsuit accounts allowed entree to the information of thousands of different customers.

"We detected this enactment connected August 19 and instantly took steps to terminate the access," Fidelity stated successful a missive sent to those affected. The institution confirmed that the information breach compromised the idiosyncratic accusation of implicit 77,000 customers but did not impact immoderate entree to their Fidelity accounts. This incidental inactive represents lone a tiny information of its wide lawsuit basal of 51.5 million.

The breach occurred betwixt Aug. 17 and 19 erstwhile an attacker accessed lawsuit names and different idiosyncratic identifiers, including Social Security numbers and driver’s licenses. Fidelity was capable to halt the unauthorized entree connected Aug. 19 aft detecting the breach.

A antheral surfing connected his cellphone. (Kurt "CyberGuy" Knutsson)

MONEYGRAM HACK EXPOSES CUSTOMERS’ SENSITIVE DATA AND CRIPPLED SERVICES

Is Fidelity doing thing astir the breach?

"We instrumentality this incidental and the security of your information precise seriously. As mentioned earlier, upon detecting this activity, we promptly took steps to terminate it and code the situation," the institution stated successful a announcement sent to affected customers. However, it’s hard to gauge however earnestly it is taking this incident, particularly since this marks the 2nd occurrence successful 2024 alone.

Fidelity is offering escaped recognition monitoring and individuality restoration services for those impacted by this breach for 24 months. The institution besides encourages individuals to enactment vigilant, regularly reappraisal their fiscal statements and study immoderate suspicious oregon fraudulent activity.

CLICK HERE FOR MORE U.S. NEWS

Illustration of a hacker astatine work. (Kurt "CyberGuy" Knutsson)

6 ways to support yourself from a information breach

1. Enable two-factor authentication (2FA) connected each accounts: One of the astir effectual ways to support your idiosyncratic and fiscal accusation from hackers is to enable two-factor authentication (2FA) wherever possible. This adds an other furniture of information by requiring 2 forms of verification earlier granting entree to your account, specified arsenic a password and a one-time codification sent to your phone. Even if your password is stolen, 2FA tin halt hackers from getting into your accounts.

2. Monitor your fiscal accounts regularly: After a information breach, particularly erstwhile delicate fiscal accusation similar transaction details and slope relationship numbers person been compromised, it’s important to regularly show your slope statements, recognition paper transactions and adjacent tiny purchases. Look for unauthorized activity, nary substance however insignificant it seems, and study it to your slope oregon work supplier immediately.

GET FOX BUSINESS ON THE GO BY CLICKING HERE

3. Change your passwords and usage strong, unsocial passwords: Fidelity customers who reused passwords crossed aggregate accounts should update their login accusation immediately. A beardown password combines uppercase and lowercase letters, numbers, and symbols, making it harder for hackers to conjecture oregon crack. Consider utilizing a password manager to securely store and make analyzable passwords. 

4. Sign up for individuality theft protection: Given that hackers stole Social Security numbers, government-issued IDs and different delicate accusation successful the Fidelity breach, affected customers should see enrolling successful individuality theft protection. These services notify you if idiosyncratic attempts to unfastened caller lines of recognition oregon loans successful your name, allowing you to instrumentality contiguous enactment to forestall individuality theft. Additionally, you tin spot fraud alerts oregon freezes connected your recognition reports to forestall unauthorized access. See my tips and champion picks connected however to support yourself from individuality theft.

5. Be wary of phishing attacks and scams: After a information breach, determination is often an uptick in phishing attacks, wherever scammers effort to instrumentality you into revealing further idiosyncratic accusation by posing arsenic morganatic companies. Always double-check the authenticity of emails, particularly those asking for delicate information. Never click connected links oregon download attachments from suspicious sources, and verify immoderate requests for accusation by contacting the institution directly. 

The champion mode to safeguard yourself from malicious links that instal malware, perchance accessing your backstage information, is to person antivirus bundle installed connected each your devices. This extortion tin besides alert you to phishing emails and ransomware scams, keeping your idiosyncratic accusation and integer assets safe. Get my picks for the champion 2024 antivirus extortion winners for your Windows, Mac, Android and iOS devices.

6. Invest successful idiosyncratic information removal services: While nary work promises to region each your information from the internet, having a removal work is large if you privation to perpetually show and automate the process of removing your accusation from hundreds of sites continuously implicit a longer play of time. Check retired my apical picks for information removal services here.

WORLD’S LARGEST STOLEN PASSWORD DATABASE UPLOADED TO CRIMINAL FORUM 

Kurt’s cardinal takeaways

Fidelity manages implicit $14 trillion successful assets, which speaks volumes astir the company’s gross and the expectations clients person for it to safeguard their information and assets. However, it appears that robust cybersecurity isn’t a apical precedence for Fidelity. Instead of implementing meaningful information measures, the institution seems to beryllium taking a "slap connected the wrist" approach, signing radical up for services that simply displacement the work to individuals to show for violations. There’s a deficiency of information measures astatine the idiosyncratic level, specified arsenic row-level information oregon authentication tokens that necessitate idiosyncratic support for entree to records.

CLICK HERE TO GET THE FOX NEWS APP

Should Fidelity and akin companies look harsher penalties for repeated breaches? Let america cognize by penning america at Cyberguy.com/Contact

For much of my tech tips and information alerts, subscribe to my escaped CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question oregon fto america cognize what stories you'd similar america to cover.

Follow Kurt connected his societal channels:

• Facebook
• YouTube
• Instagram

Answers to the most-asked CyberGuy questions:

• What is the champion mode to support your Mac, Windows, iPhone and Android devices from getting hacked?
• What is the champion mode to enactment private, unafraid and anonymous portion browsing the web?
• How tin I get escaped of robocalls with apps and information removal services?
• How bash I region my backstage information from the internet?

New from Kurt:

• Try CyberGuy's caller games (crosswords, connection searches, trivia and more!)

Copyright 2024 CyberGuy.com. All rights reserved.