"We take this incident and the security of your information very seriously," the Fidelity Investments Private Office wrote in a sample notice drafted for Maine residents. "As noted above, upon detecting this activity, we promptly took steps to terminate the activity and address this incident."
According to Fidelity's data breach notification in the state of Maine, the attack occurred between Aug. 17 and 19. As of this writing, Fidelity has not disclosed how the attacker gained access or what aspects of the new accounts allowed them to navigate through the system.
This isn't Fidelity's first brush with cyberattackers. In March, Fidelity filed a disclosure saying customers' personal information had been exposed in a ransomware attack. In that case, hackers broke into Infosys McCamish Systems through its IT systems in November 2023.
Fidelity has not disclosed how the attacker gained access or what aspects of the new accounts allowed them to navigate through the system. The third-party obtained personal information including Social Security numbers and driver's licenses.
Collection
[
|
...
]