Case Overview

Cases: Fidelity Investments Data Breach Settlement; Balance Autism Data Breach Settlement

Type: Class Action Settlements

Status: Preliminary Approval Granted (Fidelity); Settlement Reached (Balance Autism)

Verticals: Privacy, Data & Cybersecurity

Two Data Breach Class Action Settlements to Know About This Spring

Two recent data breach class action settlements are drawing attention from affected individuals — one involving a major financial institution and another tied to a healthcare services provider. If your personal information was exposed in either incident, here's what the settlements entail and what you may need to know before any deadlines pass.

Both cases reflect a continuing wave of data breach litigation targeting organizations alleged to have failed to adequately protect sensitive consumer information. Deadlines for these settlements have not yet been publicly confirmed, but affected individuals are encouraged to monitor official settlement websites for updates.

1. Fidelity Investments Data Breach Settlement

Estimated Settlement Fund: $2.5 million

Who May Qualify: Fidelity Investments account holders whose personal information was allegedly exposed in a 2024 data breach — reported to affect more than 155,000 individuals

Status: Preliminary approval granted by a Massachusetts federal judge

A $2.5 million class action settlement has received preliminary approval from a Massachusetts federal court, resolving claims that Fidelity Investments failed to adequately safeguard the personal information of its account holders during a 2024 security incident.

The lawsuit alleged that Fidelity's data security practices were insufficient to protect customer data from unauthorized access. According to the complaint, the breach compromised the personal information of more than 155,000 account holders, though the specific categories of data exposed have not been detailed in publicly available summaries at this time.

Fidelity has not admitted wrongdoing as part of the proposed settlement. The $2.5 million fund, if granted final approval by the court, would be distributed among eligible class members — though individual payout amounts would depend on the number of valid claims submitted and the settlement's allocation formula.

Individuals who believe they may have been affected by the Fidelity breach should watch for court-issued class notices and monitor the official settlement administrator's website for claim filing instructions and deadlines.

How to learn more: Details are expected to be made available through the settlement administrator once the case moves toward final approval. Affected individuals can also review case developments through publicly available court filings.

2. Balance Autism Data Breach Settlement

Settlement Amount: Not publicly disclosed

Who May Qualify: Patients whose personal information was allegedly exposed in a security incident at Balance Autism, reportedly based in Altoona

Status: Settlement reached; terms under review

Balance Autism, a provider of autism-related healthcare and behavioral services, has agreed to settle a class action lawsuit stemming from a security incident that allegedly exposed patient information, according to reporting from the HIPAA Journal.

The lawsuit alleged that Balance Autism failed to implement adequate safeguards to protect the sensitive personal and medical information of the patients it serves. Healthcare-related data breaches are considered particularly serious given the sensitivity of the information involved — including potential exposure of protected health information governed by federal privacy law.

The financial terms of the Balance Autism settlement have not been publicly disclosed in available summaries. As the case progresses toward final approval, additional details regarding eligibility criteria, claim procedures, and potential compensation are expected to become available.

Individuals who received services from Balance Autism and believe their information may have been compromised are encouraged to monitor official communications and any class notice they may receive.

How to learn more: Watch for direct notice from the settlement administrator, which is typically distributed to potential class members by mail or email. Settlement details may also become available through the court's public docket.

Key Takeaways

• Both settlements are in early stages. Neither has reached final court approval, meaning terms — including individual payout amounts — remain subject to change.
• Healthcare and financial data breaches carry elevated risk. Both cases involve sensitive categories of personal information, which courts and regulators treat with particular scrutiny.
• You may receive direct notice. Class members in certified settlements are typically notified by mail or email. Checking your inbox — including spam folders — is a practical first step if you believe you may be affected.
• No proof of harm is typically required to file a data breach claim, though requirements vary by settlement. Review the specific claim instructions carefully when they become available.
• Deadlines matter. Missing a claim filing deadline generally forfeits your ability to participate in the settlement. Monitor official settlement websites for updates as these cases move toward final approval.

Have you been affected by either of these data breaches? Share your experience in the comments below.

InjuryClaims.com reports on class action lawsuits and settlements as a public information resource. This article does not constitute legal advice. Eligibility for any settlement is determined by the court and settlement administrators — not by this publication.