Flagstar Bank Group Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Flagstar Bank, FSB regarding a recent data breach. The Flagstar Bank data breach involved sensitive personal identifiable information belonging to over 1.5 million individuals.


Flagstar Bank is a full-service bank and lending service headquartered in Troy, Michigan. Flagstar Bank operates 150 bank branches in Michigan, Indiana, California, Wisconsin, and Ohio. Originally chartered in 1987, today Flagstar Bank has assets of $23.2 billion and is the sixth largest bank mortgage originator in the United States. Additionally, Flagstar Bank’s mortgage division has 82 retail locations and handles recordkeeping for $300 billion home loans.


Recently, Flagstar Bank identified that it experienced a data breach in which the sensitive personal identifiable information of individuals in its system may have been accessed. Flagstar Bank investigated the data breach and determined that its systems had been breached between August 25, 2021, and September 15, 2021. On or around June 2, 2022, Flagstar Bank determined that sensitive personal identifiable information belonging to its customers may have been accessed. On June 17, 2022, Flagstar Bank began notifying individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number

If you are a current or former customer of Flagstar Bank:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.

If you were impacted by the Flagstar Bank data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in the free credit monitoring service provided by Flagstar Bank;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: