If you got a letter from Flagstar Bank in 2021 or 2022, it was probably one of those notices that comes in a plain envelope and is easy to miss. You probably put it down and forgot about it. A lot of people did. It turns out that letter might have been useful to keep. The last day to file a claim in the Flagstar Bank data breach settlement is August 11, 2026, and most customers who were affected don’t seem to realize how quickly time is running out.
The backstory is pretty clear, but it’s still scary. More than two million Flagstar Bank customers’ personal information may have been stolen in two separate incidents in 2021. Things like Social Security numbers, financial records, and names that can’t be changed once they’re out in the open. As is common in these kinds of settlements, Flagstar says it did nothing wrong. However, the bank still agreed to a $31.5 million class action settlement instead of going to court. The choice itself says something, even if no one at the bank says it out loud.
This settlement is worth your time because of the wide range of benefits that customers who are eligible could get. At the very least, general class members will get $60 in cash. However, that amount could go as high as $599, depending on how many valid claims come in and how much money is left in the fund after higher-priority payouts. People who live in California may be able to get an extra $100. The more important number, though, and the one that should make people stop scrolling, is the up to $25,000 that can be given for proven out-of-pocket losses directly related to the breach. That includes losses from fraud, identity theft, and some professional fees that weren’t reimbursed. It also includes credit monitoring fees that people paid for themselves after the fact to try to protect themselves. That’s real money for people who really had a hard time.
Some people think that most of the people who are affected won’t file. That’s not cynicism; it’s just how these settlements work. People get the notice, put it somewhere else, and decide that the amount isn’t worth the trouble. The deadline goes by without a hitch. In this case, the work is really very little. People who are eligible can file a claim on the official settlement website. They will need their Settlement Claim ID, which was included in the original letter or email notification. The settlement administrator can check to see if someone is eligible if they aren’t sure if they are included. There’s a chance that tens of thousands of people who qualify will never bother.
Aside from that, everyone in the eligible class gets three years of free credit monitoring and identity theft protection. This is a big deal for anyone who has seen strange accounts show up on their credit report. There is a long tail to identity theft. Damage can go unnoticed for years.
The last hearing for approval is set for October 1, 2026. There is still some waiting to do because payments won’t go out until the settlement gets past that hurdle and any further appeals are decided. But none of that changes the fact that claims must be sent in by August 11. It doesn’t matter what else you miss if you miss that.
It is hard not to notice how many of these settlements go by without making much of a fuss. When something goes wrong with a bank that has millions of people’s most private information, there is litigation, and the damage is eventually given a dollar amount. Now is a good time for anyone who has that old Flagstar letter to find it.
