Our top picks of timely offers from our partners

More details
Biz2Credit
Learn More
Terms Apply
Paid Placement
Get Prequalified up to $200,000 in business financing
Big Think Capital
Learn More
Terms Apply
Paid Placement
Small Business financing that moves as fast as you do
Monarch
Learn More
Terms Apply
Our top pick for being easy to use, Monarch's budgeting app is 50% off your first year of Core Plan with code CNBC50
Bluevine
Learn More
Terms Apply
Bluevine offers fast funding options for your small business
SBG Funding
Learn More
Terms Apply
Fast and flexible financing options for your small business
Select independently determines what we cover and recommend. We earn a commission from affiliate partners on many offers and links. This commission may impact how and where certain products appear on this site (including, for example, the order in which they appear). Read more about Select on CNBC, and click here to read our full advertiser disclosure.
Cybersecurity

Flagstar Bank $31.5M data breach settlement: See if you're eligible and learn what to do if your data is compromised 

The bank was hit with two data breaches in 2021 that impacted nearly 2.19 million customers.

Share

Flagstar Bank, one of the largest regional banks in the U.S, has agreed to a $31.5 million settlement stemming from two data breaches back in 2021. But the deadline to claim your part of the payout is just days away.

In January 2021, hackers allegedly accessed the personal information of more than 1.4 million Flagstar customers. That incident was followed by another breach in December of the same year. 

In a complaint, the plaintiffs alleged the Hicksville, New York-based financial institution failed to adequately protect its customers' personal information and delayed providing notice about the two breaches.  

Flagstar® Bank Loans

  • Annual Percentage Rate (APR)

    Apply online for rates.

  • Types of loans

    Conventional, FHA, VA, USDA, jumbo, renovation, Destination Home Mortgage, HomeReady, Home Possible, HELOC, refinancing, ReFi Now, Refi Possible

  • Terms

    15-year and 30-year fixed-rate loans; 5-year, 7-year, 10-year intro period for adjustable-rate loans

  • Credit needed

    620 for conventional, 600 for Destination Home Mortgage

  • Minimum down payment

    3% for conventional loans, 0% for VA, USDA and Destination Home Mortgage

Flagstar settlement at a glance
  • Settlement amount: $31.5 million
  • Claim deadline: Aug. 11, 2026
  • Maximum reimbursement: Up to $25,000
  • Estimated average cash payment: $60 (capped at $599 if there are few claims)
  • Credit monitoring: Three years
  • Final approval: Oct. 11, 2026

Approximately 2.19 million people are included in the settlement class. Flagstar denied any wrongdoing but agreed to the settlement to avoid the prospect of prolonged litigation.

Eligible claimants may receive reimbursement for documented losses of up to $25,000 or a residual cash payment of about $60. The last chance to submit a claim is Tuesday, Aug. 11, 2026.

Here's what you need to know about Flagstar's $31.5 million data breach settlement, including who is eligible, how to file a claim and what to do if you're the victim of identity theft.

Who is eligible for the Flagstar Bank data breach settlement?

It's estimated there are 2,187,170 members in the settlement class stemming from the two data breaches. Eligible claimants should have received a settlement notification via email or standard mail. You'll need the claim ID from that notice when you file.

If you're not sure whether you are a class member, you can go to the settlement website or call 855-542-0397.

You can also contact the settlement administrator at:

Flagstar Settlement Administrator
P.O. Box 4427
Baton Rouge, LA
70821

Struggling to pay off debt? Consider enlisting the help of a debt relief company

Offers in this section are from affiliate partners and selected based on a combination of engagement, product relevance, compensation, and consistent availability.

How much money can I get from the Flagstar Bank data breach settlement?

Eligible class action members may receive up to $25,000, depending on the nature of their losses.

  • Reimbursement of documented losses: You could receive up to $25,000 if you can document out-of-pocket losses resulting from the breach, including fraud or identity theft, credit monitoring and attorneys' or accountants' fees.
  • California Consumer Privacy Act (CCPA): Class members who were California residents at the time of the breaches may be eligible for a $100 payment. 
  • Pro rata cash payment: Class members may be eligible for payments of approximately $60 without proof or explanation, although the actual amount will depend on the number of valid claims and other legal costs.
  • Credit monitoring services: Class members are eligible for three years of three-bureau credit monitoring services from IDX, along with $1 million in identity theft insurance, dark web monitoring and identity restoration services.

How do I file a claim in the Flagstar Bank data breach settlement?

To receive a payment from the settlement, you must submit a valid claim by Aug. 11, 2026. You can file a claim online or print a PDF claim form to complete and mail to the settlement administrator.

The deadline to object to or be excluded from the settlement was June 29, 2026.

Take action to protect your identity

Offers in this section are from affiliate partners and selected based on a combination of engagement, product relevance, compensation, and consistent availability.

When will settlement payments be sent?

There will be a final fairness hearing for the case on Oct. 11, 2026. If there are no appeals, attorneys' fees and the lead plaintiffs will be paid first. The remaining funds will then be distributed among other class members who have submitted valid forms.  

Payment can be issued via PayPal, Venmo, Zelle or paper check.

What to do if you're the victim of identity theft

With identity theft, quick action is critical. The longer someone has access to your financial accounts, the more damage they can do:

  1. Place fraud alerts with Experian, Equifax and TransUnion.
  2. Review your bank and credit card statements for suspicious activity.
  3. Freeze your credit to prevent new accounts from being opened in your name.
  4. Report any cases of identity theft to the Federal Trade Commission.
  5. Keep records of all fraudulent transactions and communications with authorities.
  6. Review your credit reports for signs of suspicious activity at least once every six months. 

Your credit card company or bank may provide free updated credit score information and

PrivacyGuard®

  • Cost

    $9.99 to $24.99 per month

  • Credit bureaus monitored

    Experian, Equifax and TransUnion

  • Credit scoring model used

    VantageScore

  • Dark web scan

    Yes, for Identity and Total Protection plans

  • Identity insurance

    Yes, up to $1 million for Identity and Total Protection plans

Terms apply.

Experian IdentityWorks℠

On Experian's site
  • Cost

    Basic: Free; Premium: 7-day trial, after $24.99 per month; Family: 7-day trial, after $34.99 per month

  • Credit bureaus monitored

    1-bureau credit monitoring, alerts and reports: Experian, with Basic plan only and 3-bureau credit monitoring, alerts and reports: Experian, Equifax and TransUnion®, with Premium and Family plans only

  • Credit scoring model used

    FICO® Score 8, with all plans

  • Dark web scan

    Yes, with all plans

  • Identity theft insurance

    Yes, up to $1 million with all plans

Terms apply.

*Identity Theft Insurance underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.

How to prevent identity theft

While most strategies come into play after fraud occurs, there are a few proactive steps you can take to reduce your risk of identity theft. A password manager can help keep your passwords and usernames secure — two of our favorites, Keeper and Dashlane, add dark web monitoring and email masking for additional protection.

Keeper

  • Cost

    Keeper Free: $0; Keeper Personal Plan: $1.79 per user per month; Keeper Family Plan: $3.83 per month; Business Starter Plan: $7.00 per month.

  • Standout features

    Allows importing from other password managers, adjusts auto-fill preferences for individual websites and allows for one-time password sharing

  • Offers free version

    Yes

  • Availability

    Available for web, desktop, and mobile devices.

  • Security features

    Keeper uses a zero-knowledge approach, government-standard AES-256 encryption, supports multi-factor authentication and biometrics, and performs quarterly third-party security penetration testing

Terms apply

Pros

  • Helps you securely share passwords and files
  • Offers unlimited password storage
  • Supports fingerprint and Face ID login
  • Password strength report

Cons

  • Free version is limited to one mobile device
  • Less intuitive Interface
  • Dark web monitoring and file storage are only available on paid plans

Dashlane

  • Cost

    Premium: $5.42 per month; Friends & Family: $8.13 per month; Business: $8.00 per month; All prices are per month with annual billing selected.

  • Standout features

    The premium plan provides access to VPN, password health checker and dark web monitoring and users can securely store sensitive documents.

  • Free version

    No

  • Availability

    Available for web and mobile devices.

  • Security features

    Dashlane uses a zero-knowledge approach, government-standard AES-256 encryption and multi-factor authentication. Dashlane supports biometrics and has passed third-party security audits.

Terms apply.

Pros

  • VPN comes with the basic subscription
  • Dark web monitoring
  • Real-time scam protection
  • Password manager has a 14-day free trial.

Cons

  • No free tier
  • More expensive than some competitors
  • Lacks desktop app
  • Annual billing only

Even if you're not the victim of an attack, freezing your credit reports prevents anyone from opening a new account in your name. There's no damage to your existing accounts or credit score, and you can unfreeze your accounts whenever you want to apply for a new line of credit.

You'll have to freeze your reports with each of the three credit agencies

Identity monitoring service Aura freezes your credit reports for you, and offers numerous other security features, including a password generator, VPN, email aliases, robocall filters and malware protection. 

Aura

On Aura's site
  • Cost

    Kids: $13 per month or $10 per month billed annually; Individual: $15 per month or $12 per month billed annually; Couple: $29 per month or $22 per month billed annually; Family: $50 per month or $32 per month billed annually

  • Standout features

    Protects against identity theft, fraud, spam calls and websites, viruses and malware. Offers three credit bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.

  • Identity theft insurance

    All plans include at least $1 million and white-glove fraud remediation

Terms apply.

Pros

  • 14-day free trial
  • Family plan includes up to 5 adults and an unlimited number of kids
  • Discount if you buy an annual plan
  • Up to $1 million to cover losses or expenses related to identity theft

Cons

  • Doesn't monitor social media accounts
  • Annual plans can only be canceled in the first 60 days for a money-back guarantee

FAQs

The final fairness hearing is on Oct. 11, 2026. If and when the court grants approval and any appeals are resolved, any payments should be issued after that.

If you do not file a claim by Aug. 11, 2026, you will not receive benefits or payments. The deadline to object to the settlement or opt out of it and pursue your own lawsuit has already passed.

If you can prove that you suffered financial losses linked to the breach, you could be eligible for a payment of up to $25,000, but proof of losses is not required to file a claim. Class members who don't document losses may only receive approximately $60, however, depending on the number of claims filed. California residents may be able to claim $100 under the California Consumer Privacy Act.

Signs of a data breach may include unfamiliar bank or credit card transactions, debt collection notices for accounts you don't recognize, unexpected password reset emails and alerts from your bank or credit monitoring service. Not all identity theft is easy to spot, so reviewing your credit reports regularly is an important step, as well.

Subscribe to the CNBC Select Newsletter!

The CNBC Select Recommends newsletter delivers practical money tips each week along with expert-picked financial product recommendations. Sign up here.

Why trust CNBC Select?

At CNBC Select, our mission is to provide our readers with high-quality service journalism and comprehensive consumer advice so they can make informed financial decisions. Every cybersecurity article is based on rigorous reporting by our team of expert writers and editors. While CNBC Select earns a commission from affiliate partners on many offers and links, we create all our content without input from our commercial team or any outside third parties, and we pride ourselves on our journalistic standards and ethics.

Catch up on CNBC Select's in-depth coverage of credit cardsbanking and money, and follow us on TikTokFacebookInstagram and Twitter to stay up to date.

Editorial Note: Opinions, analyses, reviews or recommendations expressed in this article are those of the Select editorial staff’s alone, and have not been reviewed, approved or otherwise endorsed by any third party.
Biz2Credit
Learn More
Terms Apply
Paid Placement
Up to $2 million in financing for US Small Business Owners
Empower
Learn More
Terms Apply
Get free tools and guidance to see how your investments are doing.