Flagstar Bank Data Breach Settlement: Up to $25,000 for Documented Losses — $31.5 Million Fund, Claim Deadline August 11, 2026
Flagstar Bank 2021 Data Breach Class Action Settlement
Flagstar Bank, N.A. has agreed to a $31.5 million class action settlement over two cyberattacks in January and December 2021 that exposed the personal information of approximately 2.19 million U.S. consumers. Class members who are among the approximately 2,187,170 individuals identified by Flagstar as having their personal information impacted by the data breaches can claim reimbursement for documented monetary losses up to $25,000, a residual cash payment estimated at $60 (up to $599) with no proof required, three years of three-bureau credit monitoring at no cost, and, for California residents, a statutory cash payment of up to $100. Claims must be filed by August 11, 2026.
Settlement fund
$31.5M
Common fund
Top payout
Up to $25,000
Documented losses; est. $60 residual cash + 3 yrs monitoring
Claim deadline
Aug 11, 2026
68 days remaining
You may be owed money
Filing is free and takes a few minutes. Deadline: Aug 11, 2026.
Do you qualify?
You are a Class Member if ALL of the following apply:
- You are among the approximately 2,187,170 U.S. consumers identified by Flagstar whose personal information was impacted by either the January 2021 or December 2021 cyberattacks on Flagstar's systems. Flagstar sent notice by email or postcard to identified class members; your Claim ID appears at the top of that notice.
- California residents who were living in California at the time of the data breaches are also members of the California Settlement Class and may elect an additional statutory payment of up to $100.
- Excluded: Flagstar, any entity in which Flagstar has a controlling interest, and Flagstar's officers, directors, legal representatives, successors, subsidiaries, and assigns; any judge, justice, or judicial officer presiding over the action and their immediate family and judicial staff; and any class member who timely and validly opts out of the settlement.
Not sure if you qualify? Call the Settlement Administrator at 1-855-542-0397, email info@FlagstarSettlement.com, or visit FlagstarSettlement.com.
What happened
On March 5, 2021, Flagstar announced a January 2021 cyberattack in which criminals infiltrated a file-sharing platform used by the bank and accessed the personally identifiable information of approximately 1.47 million individuals. On June 17, 2022, Flagstar announced a second cyberattack from December 2021 in which criminals infiltrated Flagstar's own network and accessed the information of approximately 1.58 million individuals. Together the two breaches impacted approximately 2,187,170 U.S. consumers, including approximately 364,000 California residents. Plaintiffs alleged that Flagstar failed to adequately protect consumer data and delayed notifying affected individuals.
Flagstar denies the allegations and denies any wrongdoing or liability. No court has made any determination that Flagstar did anything wrong. The parties agreed to settle after a mediation process overseen by a retired federal judge, in order to avoid the cost, uncertainty, and time of continued litigation.
How to file a claim
-
1. Confirm you are eligible
You qualify if you are among the approximately 2,187,170 U.S. consumers Flagstar identified as having personal information impacted by either the January 2021 or December 2021 data breaches. If you received a notice email or postcard from Flagstar, your Claim ID is printed at the top. California residents who lived in California at the time of the breaches are also part of the California sub-class.
-
2. Choose your benefits
Four benefit types are available, and you can elect more than one on the same Claim Form. (1) Reimbursement of documented monetary losses up to $25,000 for out-of-pocket expenses fairly traceable to the breaches, including unreimbursed fraud losses, professional fees, credit freeze costs, credit monitoring costs incurred after the breach, and miscellaneous expenses such as postage or mileage. Receipts or third-party records are required. (2) A residual cash payment estimated at $60, up to a maximum of $599, with no documentation needed. The final amount is pro rata and depends on how many valid claims are filed. (3) Three years of three-bureau credit monitoring through IDX, including $1 million in identity theft insurance, dark web monitoring, and fully managed identity restoration services. (4) For California residents only, a statutory payment of up to $100, no proof of residency required beyond a signed attestation.
-
3. File online or by mail
Submit your Claim Form online at flagstarsettlement.pnclassaction.com by August 11, 2026. If you received a notice, have your Claim ID ready. You can also mail a paper Claim Form (postmarked by August 11, 2026) to: Flagstar Settlement Administrator, P.O. Box 4427, Baton Rouge, LA 70821. Note: the tear-off mailed claim form is sufficient for the residual cash payment, credit monitoring, and California statutory payment, but the full online or paper form with documentation is required for documented monetary loss claims.
-
4. Receive your payment
Payments are issued after the Court grants final approval at the October 1, 2026 Fairness Hearing and any appeals are resolved. Appeals can delay distribution by a year or more. No follow-up is required once a valid Claim Form is submitted.
Key dates
- Jun 29, 2026 Opt-out & objection deadline Upcoming
- Aug 11, 2026 Claim filing deadline Upcoming
- Oct 1, 2026 Final Fairness Hearing (9:30 a.m. ET, via Zoom) Upcoming
- TBD after final approval Payments issued to claimants Pending
The Final Approval Hearing is scheduled for October 1, 2026 at 9:30 a.m. ET via Zoom videoconference. The Court may move the hearing, so check FlagstarSettlement.com or call 1-855-542-0397 for updates.
Where the money is going
This is a non-reversionary common fund. Attorneys' fees (Class Counsel will seek up to $10,500,000, or one-third of the fund), litigation costs up to $500,000, Service Awards up to $2,500 per class representative, and notice and administration costs all come out of the $31.5 million Settlement Fund before class member payments are calculated. The residual cash payment is calculated last, after all other deductions and valid documented-loss and California statutory claims are paid.
All amounts are pending and subject to final court approval at the October 1, 2026 Fairness Hearing. The Court may award less than the amounts requested. The residual cash payment is estimated at $60 based on expected claims rates but may be higher or lower. If total valid documented-loss and California statutory claims exceed available funds, payments will be reduced pro rata and the residual cash payment may be eliminated.
Common questions
How much money will I receive?
Class members can claim up to $25,000 in reimbursement for documented out-of-pocket monetary losses tied to the breaches, with receipts or third-party records. Without documentation, class members can still claim a residual cash payment estimated at $60, up to a maximum of $599, which is calculated pro rata based on remaining fund after other payments. All class members can also enroll in three years of free three-bureau credit monitoring through IDX. California residents can additionally claim a statutory payment of up to $100. The residual cash estimate could be higher or lower depending on how many valid claims are filed.
Do I need to submit proof of purchase?
For the residual cash payment and credit monitoring enrollment, no documentation is required. For the California statutory payment, you need to attest under penalty of perjury that you lived in California at the time of the breaches; no residency documents are required unless specifically requested. For documented monetary loss reimbursements, you must provide receipts, bank statements, or other third-party records. Self-prepared documents alone are not sufficient, though they can support other official documentation.
What if I didn’t receive a notice?
Yes, you may still file. Contact the Settlement Administrator at 1-855-542-0397, email info@FlagstarSettlement.com, or visit FlagstarSettlement.com to confirm your eligibility and obtain your Claim ID. Notice was sent by email and postcard to all identified class members.
Does staying in the class affect my right to sue later?
Unless you submit a written Request for Exclusion postmarked by June 29, 2026 to the Settlement Administrator, you will be bound by the Settlement and will release all claims against Flagstar and the other Released Parties arising out of or relating to the January 2021 and December 2021 data breaches. To opt out, mail a signed letter with your full name, address, and the words 'Request for Exclusion' to: Flagstar Settlement Administrator, Attn: Exclusion Request, P.O. Box 4427, Baton Rouge, LA 70821.
When will payments be sent out?
The Court will hold a Final Approval Hearing on October 1, 2026 at 9:30 a.m. ET via Zoom. If the Court approves the Settlement and the judgment becomes final, payments and credit monitoring enrollment will be distributed after any appeals are resolved. Appeals can delay distribution by a year or more. No action is required after a valid Claim Form is submitted.
Dapeer Law, P.A.
Consumer class action attorneys based in South Florida. We track settlements so you don’t have to.
Similar open settlements
This page is for informational purposes only and does not constitute legal advice. Dapeer Law, P.A. is not the administrator of this settlement and is not affiliated with Flagstar Bank, N.A., EisnerAmper (Flagstar Settlement Administrator, P.O. Box 4427, Baton Rouge, LA 70821) (the Settlement Administrator), or Class Counsel John Yanchunis of Morgan & Morgan Complex Litigation Group and Norman Siegel of Stueve Siegel Hanson LLP. The case is Angus, et al. v. Flagstar Bank, N.A., Case No. 2:21-cv-10657-MFL-DRG, pending in the U.S. District Court for the Eastern District of Michigan before the Honorable Matthew F. Leitman. Class representatives are Angus (and others named in the Complaint). Flagstar denies wrongdoing. This website is attorney advertising. Past results do not guarantee future outcomes.
