Flagstar Bank data breach settlement
Yes. The Flagstar Bank data breach settlement is real: a $31.5 million class action settlement in federal court, Eastern District of Michigan, run by a court-appointed settlement administrator. The claim deadline, 11 August 2026, has passed and the judge approved the settlement on 5 October 2026. Payments have not been sent yet.
The court granted final approval on 5 October 2026 (order filed after the 1 October hearing); claims closed on 11 August 2026 and payments have not been announced.
Is it real?
Yes. The case is Angus, et al. v. Flagstar Bank, N.A., case number 2:21-cv-10657-MFL-DRG, in the United States District Court, Eastern District of Michigan. A court-appointed settlement administrator runs it, and its only official site is flagstarsettlement.com.
How the real notice reached people. The notice says it 'was sent via electronic and/or direct mail to all Settlement Class Members'; the final approval order says direct notice went by mail and email starting May 2026, with a tear-off claim form mailed to class members. Notices carried a 'Unique Class Member ID number' (required for the California payment). Online claims went through flagstarsettlement.pnclassaction.com, linked from the official site. The sender email address is not published. The site calls itself the only authorized website and says other websites may contain incorrect information; it has no specific scam warning. It tells people not to contact the Court, the Judge or Flagstar Bank.
To tell a real message from a scam:
- The only official site is flagstarsettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your Flagstar Bank password, your online banking login or a code texted to you. Payment details go only into the claim form on flagstarsettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on 1-855-542-0397, the number on flagstarsettlement.com, not one in the message.
- Claims have closed.The deadline was 11 August 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on flagstarsettlement.com instead.
Who qualifies
All persons in the United States whose personally identifying information was impacted by either or both of the two data breaches Flagstar experienced in 2021, as reflected in the Class List. Flagstar, its officers and related entities, the judge and staff, and anyone who opted out are excluded.
Size: approximately 2,187,170 U.S. consumers, including approximately 364,000 California residents.
It covers people in the United States only (nationwide class, plus a California class). If you live elsewhere, you are not part of it, whatever a message says.
There are 2 groups, each with its own payments:
- Nationwide Settlement Class. About 2,187,170 U.S. consumers identified by Flagstar whose personal information was impacted by the Data Breaches (the final approval order says approximately 2,186,156)..
- California Settlement Class. About 364,000 class members who resided in California at the time of the Data Breaches..
How much
The total settlement is $31,500,000. What each person can claim:
| Benefit | Amount | Notes |
|---|---|---|
| Reimbursement of Documented Monetary Losses | up to $25,000 per individual | out-of-pocket losses fairly traceable to the breaches, including credit monitoring and credit freeze costs; documentation required |
| Residual Cash Payment | currently estimated to be $60, and in no event more than $599 | pro rata from what is left after losses, credit monitoring, California payments, fees and costs; can be claimed in addition to documented losses |
| Credit Monitoring Services | three (3) years of three-bureau identity theft protection and Credit Monitoring Services | must be claimed |
| California Statutory Payment | up to $100 | California residents at the time of the breaches; name, address, Unique Class Member ID and an attestation of California residency |
- Nationwide Settlement Class: Documented Monetary Losses: up to $25,000 per individual; Residual Cash Payment: estimated at $60, up to $599; Three years of three-bureau credit monitoring and identity theft protection.
- California Settlement Class: Everything the nationwide class gets; California Statutory Payment: up to $100.
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed).
- Opt-out and objection deadline: .
- Final approval hearing: .
- Final approval granted: .
Payout. The administrator has not published a payment date. The FAQ says payments will be distributed as soon as possible after final approval and once any appeals are resolved.
The administrator: “Notice was sent via electronic and/or direct mail to all Settlement Class Members.”
Filing and payment
- Claims closed on 11 August 2026; new claims can no longer be filed.
- Claimants can update contact or payment details through the 'Update' link on www.flagstarsettlement.com (it goes to flagstarsettlement.pnclassaction.com/Update).
- Questions go to the Settlement Administrator at 1-855-542-0397 or [email protected], not the court or Flagstar.
Official site: flagstarsettlement.com. Phone: 1-855-542-0397. Mail: Flagstar Settlement Administrator, P.O. Box 4427, Baton Rouge, LA 70821.
The breach, and what to do today
Two cyberattacks in 2021. In January 2021 criminals got into a file sharing platform Flagstar used (announced 5 March 2021, about 1.47 million people); in December 2021 they got into Flagstar's own network (announced 17 June 2022, about 1.58 million people).
What was exposed: personally identifiable information (PII).
A settlement pays for what already happened. The data is still out there, so do these now:
- Read the breach letter you were sent.It says which of your details were exposed. If it names your Social Security number, freeze your credit: in the US it’s free at Equifax, Experian and TransUnion.
- Distrust messages about Flagstar Bank and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- When payments will be sent.
- Exactly which details were exposed: the settlement papers describe it only as personal information.
Questions
Is the Flagstar Bank data breach settlement legit?
Yes. It is Angus, et al. v. Flagstar Bank, N.A., case 2:21-cv-10657-MFL-DRG, in the United States District Court, Eastern District of Michigan. A court-appointed settlement administrator runs it for the court, and the only official site is flagstarsettlement.com.
Who qualifies for the Flagstar Bank settlement?
All persons in the United States whose personally identifying information was impacted by either or both of the two data breaches Flagstar experienced in 2021, as reflected in the Class List. Flagstar, its officers and related entities, the judge and staff, and anyone who opted out are excluded.
How much will I get from the Flagstar Bank settlement?
Up to up to $25,000 per individual for losses you can prove, or currently estimated to be $60, and in no event more than $599 as a cash payment without receipts. The total settlement is $31,500,000. Final amounts depend on how many valid claims there are.
What is the deadline for the Flagstar Bank settlement?
The claim deadline was 11 August 2026. It has passed.
When will the Flagstar Bank settlement pay out?
The administrator has not published a payment date. The FAQ says payments will be distributed as soon as possible after final approval and once any appeals are resolved.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- Flagstar Settlement: home, Settlement website (EisnerAmper), read 7 Nov 2026: fund, benefits, deadlines marked passed, final approval update.
- Flagstar Settlement: FAQs, Settlement website, read 7 Nov 2026: notice method, Unique Class Member ID, payment timing, contact details.
- Contact the Settlement Administrator, Settlement website, read 7 Nov 2026: phone, email, PO box.
- Long Form Notice, Settlement website, read 7 Nov 2026: incident description, people counts, benefit amounts, deadlines.
- Final Approval Order and Judgment (ECF No. 137), US District Court, E.D. Michigan (copy on settlement website), read 7 Nov 2026: dated and filed 5 Oct 2026; class definition; notice by mail and email.