Flagstar 2021 data breach victims can claim up to $25,000 before August 11

Flagstar Bank agreed to pay $31.5 million to settle a class action lawsuit over two 2021 cyberattacks.

The 2021 breaches affected about 2.1 to 2.2 million customers, with the January attack exposing data of over 1.4 million and the December attack affecting over 1.5 million.

Eligible customers can file claims by August 11, 2026, for payments ranging from about $60 to $25,000 depending on documented losses.

The breaches included ransomware in Flagstar's Citrix environment, which disrupted mortgage operations, mobile apps, and customer call center, and forced server rebuilds and password resets.

Flagstar was also affected by the 2023 MOVEit breach, which exposed data of about 837,390 customers, though this is not part of the 2021 settlement.