Flagstar Bank, one of the largest regional banks in the U.S, has agreed to a $31.5 million settlement stemming from two data breaches back in 2021. But the deadline to claim your part of the payout is just days away.
In January 2021, hackers allegedly accessed the personal information of more than 1.4 million Flagstar customers. That incident was followed by another breach in December of the same year.
In a complaint, the plaintiffs alleged the Hicksville, New York-based financial institution failed to adequately protect its customers' personal information and delayed providing notice about the two breaches.
Flagstar® Bank Loans
Annual Percentage Rate (APR)
Apply online for rates.
Types of loans
Conventional, FHA, VA, USDA, jumbo, renovation, Destination Home Mortgage, HomeReady, Home Possible, HELOC, refinancing, ReFi Now, Refi Possible
Terms
15-year and 30-year fixed-rate loans; 5-year, 7-year, 10-year intro period for adjustable-rate loans
Credit needed
620 for conventional, 600 for Destination Home Mortgage
Minimum down payment
3% for conventional loans, 0% for VA, USDA and Destination Home Mortgage
- Settlement amount: $31.5 million
- Claim deadline: Aug. 11, 2026
- Maximum reimbursement: Up to $25,000
- Estimated average cash payment: $60 (capped at $599 if there are few claims)
- Credit monitoring: Three years
- Final approval: Oct. 11, 2026
Approximately 2.19 million people are included in the settlement class. Flagstar denied any wrongdoing but agreed to the settlement to avoid the prospect of prolonged litigation.
Eligible claimants may receive reimbursement for documented losses of up to $25,000 or a residual cash payment of about $60. The last chance to submit a claim is Tuesday, Aug. 11, 2026.
Here's what you need to know about Flagstar's $31.5 million data breach settlement, including who is eligible, how to file a claim and what to do if you're the victim of identity theft.
Who is eligible for the Flagstar Bank data breach settlement?
It's estimated there are 2,187,170 members in the settlement class stemming from the two data breaches. Eligible claimants should have received a settlement notification via email or standard mail. You'll need the claim ID from that notice when you file.
If you're not sure whether you are a class member, you can go to the settlement website or call 855-542-0397.
You can also contact the settlement administrator at:
Flagstar Settlement Administrator
P.O. Box 4427
Baton Rouge, LA
70821
Offers in this section are from affiliate partners and selected based on a combination of engagement, product relevance, compensation, and consistent availability.

Freedom Debt Relief has resolved over $20 billion in outstanding debts since 2002. It offers free credit card debt relief consultations.
How much money can I get from the Flagstar Bank data breach settlement?
Eligible class action members may receive up to $25,000, depending on the nature of their losses.
- Reimbursement of documented losses: You could receive up to $25,000 if you can document out-of-pocket losses resulting from the breach, including fraud or identity theft, credit monitoring and attorneys' or accountants' fees.
- California Consumer Privacy Act (CCPA): Class members who were California residents at the time of the breaches may be eligible for a $100 payment.
- Pro rata cash payment: Class members may be eligible for payments of approximately $60 without proof or explanation, although the actual amount will depend on the number of valid claims and other legal costs.
- Credit monitoring services: Class members are eligible for three years of three-bureau credit monitoring services from IDX, along with $1 million in identity theft insurance, dark web monitoring and identity restoration services.
How do I file a claim in the Flagstar Bank data breach settlement?
To receive a payment from the settlement, you must submit a valid claim by Aug. 11, 2026. You can file a claim online or print a PDF claim form to complete and mail to the settlement administrator.
The deadline to object to or be excluded from the settlement was June 29, 2026.
Offers in this section are from affiliate partners and selected based on a combination of engagement, product relevance, compensation, and consistent availability.

Plans from $10 to $32 per month, billed annually
Protects against identity theft, fraud, spam calls and websites, viruses and malware. Offers three-credit-bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.
On Aura's site

From $7.50 to $25.00 per month, billed annually on individual plans and $12.50 to $33.33 per month, billed annually on family plans
Up to $1 million in insurance for eligible losses from identity theft
On Identity Guard's site
When will settlement payments be sent?
There will be a final fairness hearing for the case on Oct. 11, 2026. If there are no appeals, attorneys' fees and the lead plaintiffs will be paid first. The remaining funds will then be distributed among other class members who have submitted valid forms.
Payment can be issued via PayPal, Venmo, Zelle or paper check.
What to do if you're the victim of identity theft
With identity theft, quick action is critical. The longer someone has access to your financial accounts, the more damage they can do:
- Place fraud alerts with Experian, Equifax and TransUnion.
- Review your bank and credit card statements for suspicious activity.
- Freeze your credit to prevent new accounts from being opened in your name.
- Report any cases of identity theft to the Federal Trade Commission.
- Keep records of all fraudulent transactions and communications with authorities.
- Review your credit reports for signs of suspicious activity at least once every six months.
Your credit card company or bank may provide free updated credit score information and
- Fee copies of your credit reports are available through AnnualCreditReport.com.
- You can get a free credit report from Experian every 30 days.
- CreditWise from Capital One provides free TransUnion credit reports, whether you're a cardholder or not.
- Equifax offers two free credit reports per year with myEquifax.
- A paid identity theft protection service like PrivacyGuard® or Experian IdentityWorks℠ will provide regular updates on all three reports, along with other identity theft services.
PrivacyGuard®
Cost
$9.99 to $24.99 per month
Credit bureaus monitored
Experian, Equifax and TransUnion
Credit scoring model used
VantageScore
Dark web scan
Yes, for Identity and Total Protection plans
Identity insurance
Yes, up to $1 million for Identity and Total Protection plans
Terms apply.
Experian IdentityWorks℠
Cost
Basic: Free; Premium: 7-day trial, after $24.99 per month; Family: 7-day trial, after $34.99 per month
Credit bureaus monitored
1-bureau credit monitoring, alerts and reports: Experian, with Basic plan only and 3-bureau credit monitoring, alerts and reports: Experian, Equifax and TransUnion®, with Premium and Family plans only
Credit scoring model used
FICO® Score 8, with all plans
Dark web scan
Yes, with all plans
Identity theft insurance
Yes, up to $1 million with all plans
Terms apply.
*Identity Theft Insurance underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.
How to prevent identity theft
While most strategies come into play after fraud occurs, there are a few proactive steps you can take to reduce your risk of identity theft. A password manager can help keep your passwords and usernames secure — two of our favorites, Keeper and Dashlane, add dark web monitoring and email masking for additional protection.
Keeper
Cost
Keeper Free: $0; Keeper Personal Plan: $1.79 per user per month; Keeper Family Plan: $3.83 per month; Business Starter Plan: $7.00 per month.
Standout features
Allows importing from other password managers, adjusts auto-fill preferences for individual websites and allows for one-time password sharing
Offers free version
Yes
Availability
Available for web, desktop, and mobile devices.
Security features
Keeper uses a zero-knowledge approach, government-standard AES-256 encryption, supports multi-factor authentication and biometrics, and performs quarterly third-party security penetration testing
Terms apply
Pros
- Helps you securely share passwords and files
- Offers unlimited password storage
- Supports fingerprint and Face ID login
- Password strength report
Cons
- Free version is limited to one mobile device
- Less intuitive Interface
- Dark web monitoring and file storage are only available on paid plans
Dashlane
Cost
Premium: $5.42 per month; Friends & Family: $8.13 per month; Business: $8.00 per month; All prices are per month with annual billing selected.
Standout features
The premium plan provides access to VPN, password health checker and dark web monitoring and users can securely store sensitive documents.
Free version
No
Availability
Available for web and mobile devices.
Security features
Dashlane uses a zero-knowledge approach, government-standard AES-256 encryption and multi-factor authentication. Dashlane supports biometrics and has passed third-party security audits.
Terms apply.
Pros
- VPN comes with the basic subscription
- Dark web monitoring
- Real-time scam protection
- Password manager has a 14-day free trial.
Cons
- No free tier
- More expensive than some competitors
- Lacks desktop app
- Annual billing only
Even if you're not the victim of an attack, freezing your credit reports prevents anyone from opening a new account in your name. There's no damage to your existing accounts or credit score, and you can unfreeze your accounts whenever you want to apply for a new line of credit.
You'll have to freeze your reports with each of the three credit agencies
- Equifax: Visit the Equifax Consumer Services Center or call 800-349-9960.
- Experian: Contact Experian's security freeze center or call 888-397-3742.
- TransUnion: Visit the TransUnion website or call 888-909-8872.
Identity monitoring service Aura freezes your credit reports for you, and offers numerous other security features, including a password generator, VPN, email aliases, robocall filters and malware protection.
Aura
Cost
Kids: $13 per month or $10 per month billed annually; Individual: $15 per month or $12 per month billed annually; Couple: $29 per month or $22 per month billed annually; Family: $50 per month or $32 per month billed annually
Standout features
Protects against identity theft, fraud, spam calls and websites, viruses and malware. Offers three credit bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.
Identity theft insurance
All plans include at least $1 million and white-glove fraud remediation
Terms apply.
Pros
- 14-day free trial
- Family plan includes up to 5 adults and an unlimited number of kids
- Discount if you buy an annual plan
- Up to $1 million to cover losses or expenses related to identity theft
Cons
- Doesn't monitor social media accounts
- Annual plans can only be canceled in the first 60 days for a money-back guarantee
FAQs
When will payment be sent in the Flagstar Bank settlement case?
The final fairness hearing is on Oct. 11, 2026. If and when the court grants approval and any appeals are resolved, any payments should be issued after that.
What happens if I miss the deadline to file?
If you do not file a claim by Aug. 11, 2026, you will not receive benefits or payments. The deadline to object to the settlement or opt out of it and pursue your own lawsuit has already passed.
Do I need proof of identity theft to file a claim in the Flagstar Bank settlement?
If you can prove that you suffered financial losses linked to the breach, you could be eligible for a payment of up to $25,000, but proof of losses is not required to file a claim. Class members who don't document losses may only receive approximately $60, however, depending on the number of claims filed. California residents may be able to claim $100 under the California Consumer Privacy Act.
How do I know if my personal information has been compromised?
Signs of a data breach may include unfamiliar bank or credit card transactions, debt collection notices for accounts you don't recognize, unexpected password reset emails and alerts from your bank or credit monitoring service. Not all identity theft is easy to spot, so reviewing your credit reports regularly is an important step, as well.
The CNBC Select Recommends newsletter delivers practical money tips each week along with expert-picked financial product recommendations. Sign up here.
Why trust CNBC Select?
At CNBC Select, our mission is to provide our readers with high-quality service journalism and comprehensive consumer advice so they can make informed financial decisions. Every cybersecurity article is based on rigorous reporting by our team of expert writers and editors. While CNBC Select earns a commission from affiliate partners on many offers and links, we create all our content without input from our commercial team or any outside third parties, and we pride ourselves on our journalistic standards and ethics.
Catch up on CNBC Select's in-depth coverage of credit cards, banking and money, and follow us on TikTok, Facebook, Instagram and Twitter to stay up to date.






