Fidelity Data Breach: Lessons for Small Business Security
Last updated:
Fidelity Investments reported a data breach affecting more than 77,000 customers, with activity between August 17 and 19, 2024. The exposed information reportedly included Social Security numbers and driver’s license details. Even a small share of a large customer base is a serious event for the people involved, and the incident is a useful prompt for smaller companies to check their own basics.
What a breach can cost a business
- Direct costs: investigation, legal advice, notifications and any regulatory penalties.
- Lost trust: customers may leave when they feel their information was not protected.
- Disruption: responding takes time away from normal work.
Lessons to apply
- Encrypt sensitive data on laptops, servers and in transit.
- Keep security current: review controls regularly, because even well-resourced organizations are breached.
- Train employees to recognize and report phishing and suspicious requests.
- Monitor for unusual activity so problems are noticed early.
- Write an incident response plan that names who decides, who calls whom and how customers are told.
These practices are part of managed cybersecurity, delivered as an ongoing service rather than a one-time project.
Related reading
- managed cybersecurity for Portland businesses
- Data breach at Bank of America: what Portland businesses need to know
- Cybersecurity for small businesses (2026)
Talk to a local team
PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.
Request an IT assessment
Tell us a little about your business and a PDX IT team member will follow up to schedule an assessment. Prefer to talk? Call 971-331-4871.
About the author: Steve Shaff
Steve Shaff is the owner of PDX Information Technology Services, a managed IT provider he founded in 2020. From the Tualatin office he helps businesses across Portland Metro & Southwest Washington with IT support, cybersecurity and compliance. More about Steve ยท Contact PDX IT
Infostealer malware copies saved passwords and live session cookies from a browser and sells them on the dark web, which lets attackers walk past MFA. Here’s how it works and a practical 10-step plan for Portland-area small businesses.
Modern ransomware gangs don’t just lock your files. They copy your data first, then threaten to publish or sell it on the dark web. Here is how double extortion works and what Portland-area small businesses can do before, during and after an attack.
Portland small business mobile security checklist: lock phones, avoid risky public Wi-Fi, secure office wireless, spot text scams and handle lost phones.