Flagstar Settlement: Approved, Not Yet Paid

At a glance

Status

Approved, awaiting payment

Defendant

Flagstar Bank, N.A.

Settlement fund

$31,500,000

Claim deadline

August 11, 2026

No-proof cash option

Yes — residual cash payment estimated at $60, capped at $599, no proof of loss required, or up to 25000

Max documented payout

$25,000

Administrator

Eisner Advisory Group LLC (d/b/a EisnerAmper)

Official site

flagstarsettlement.com

Court

U.S. District Court, Eastern District of Michigan

Case number

2:21-cv-10657-MFL-DRG (Angus et al. v. Flagstar Bank, N.A.), No. 2:21-cv-10657-MFL-DRG

Last verified October 6, 2026

Key dates

Milestone	Date	What it means
Claim deadline	August 11, 2026(passed)	Last day to file for a payment
Opt-out (exclusion) deadline	June 29, 2026(passed)	Last day to leave the settlement and keep the right to sue
Objection deadline	None listed	Last day to object to the terms
Final approval hearing	October 1, 2026(passed)	When the judge decides whether to approve the settlement
Expected payout	Not yet scheduled	Payments are not sent until after final approval and any appeals

Where to file

Flagstar Bank Data Breach Settlement (Angus v. Flagstar Bank) is administered by Eisner Advisory Group LLC (d/b/a EisnerAmper). The only place to file is the official settlement website:

Verify on the official site

flagstarsettlement.com

Filing is free. No legitimate settlement charges a fee to file a claim.

You cannot file on RecordingLaw.com. We are an independent publisher, not the settlement administrator, and we are not affiliated with any court, agency, or defendant.

Flagstar Bank customers and mortgage borrowers whose personal information was exposed in two 2021 data breaches are now past the claim deadline. The claims window on this $31.5 million class action settlement, covering roughly 2.19 million people, closed on August 11, 2026. The case is still moving through court, with a final approval hearing set for October 1, 2026, so here is what is confirmed, what a realistic payout looks like, and what to do if you are not sure whether you were affected.

What happened in the Flagstar Bank data breaches

The settlement resolves consolidated litigation over two separate incidents at Flagstar Bank, N.A., one in January 2021 and one in December 2021, that Flagstar disclosed had impacted customers' and employees' personal information. The case is known as Angus v. Flagstar Bank, N.A., filed in the U.S. District Court for the Eastern District of Michigan under case number 2:21-cv-10657-MFL-DRG.

Flagstar has not admitted wrongdoing. As with most bank data breach settlements, this one exists because litigating the underlying claims through trial would take years and cost more than either side expects to recover, so both parties agreed to a negotiated fund instead.

Where the case stands right now

As of September 9, 2026, the settlement has preliminary court approval and its claims period is over. The deadline to submit a claim was August 11, 2026, and the official settlement site now marks it passed, along with the June 29, 2026 deadlines to exclude yourself (opting out) and to object.

A federal judge still has to sign off on the deal at a final approval hearing scheduled for October 1, 2026, before any money moves. No payout date has been set, and none will be until after that hearing and any objections are resolved. If you came here looking for a check date, there is not one yet.

Who is in the settlement class

The class covers an estimated 2.19 million people in the United States whose personal information Flagstar identified as affected by the January 2021 and December 2021 breaches. Within that group, roughly 364,000 California residents make up a separate subclass with claims tied to California-specific privacy law, which carried an extra cash benefit described below.

If you banked with Flagstar, had a mortgage serviced by Flagstar, or worked there around 2021 and later received a breach notification letter or email, you may be part of this class. Membership is based on whether Flagstar's own records show your information was involved, not on whether you remember getting a letter.

How much money can you actually get

The settlement offered four benefits, and the settlement agreement lets class members claim them together rather than choosing only one. Any class member could request a residual cash payment without documenting a loss. The settlement administrator estimates that payment at around $60, with a hard cap of $599 per person, and no proof of loss was required for it.

Class members with actual, documented losses connected to the breach, such as fraud charges, time spent resolving identity theft, or other measurable costs, could also claim reimbursement up to $25,000 with supporting records.

Eligible claimants could also enroll in three years of three-bureau credit monitoring at no cost, in addition to any cash benefit.

Class members who lived in California at the time of the breaches could also elect a California statutory payment of up to $100, and the settlement agreement says it can be stacked with a documented-loss claim and the residual cash payment. It was claims-made, so only California class members who filed a claim receive it.

Treat all of these numbers as estimates, not promises. They come out of a shared $31.5 million fund, and the actual per-person amount depends on how many people file valid claims and what the court approves for attorney fees and administrative costs. If claims run high, the no-proof payment could land well under the $60 estimate, and if documented-loss and California payments use up the remaining fund, those claims are reduced pro rata and there is no residual payment at all. Nobody is guaranteed a specific dollar figure.

What proof you need to file

For the no-proof residual payment, no documentation was required. The claimant attested that their information was part of the breach and selected that option.

For the California statutory payment, claimants gave their name, address, and class member ID and attested under penalty of perjury that they lived in California at the time of the breaches. No proof of residency was required unless the administrator specifically asked for it.

For the documented-loss tier, claimants needed records tying the claimed loss to this breach, such as bank or credit card statements showing fraudulent charges, or receipts for costs paid to address identity theft. The more specific and dated the documentation, the stronger the claim.

How filing works

One claim form covered every benefit, and claimants could select more than one: the no-proof residual payment, the documented-loss claim with supporting records attached, credit monitoring, and, for California class members, the California statutory payment. The deadline to submit was August 11, 2026.

A claims-made deadline like this one does not reopen once it passes, and this one has passed. If you filed in time, flagstarsettlement.com is where the administrator posts approval and payment updates.

If you are not sure you were affected, or you missed a step

Whether or not you file a claim, the single most useful thing you can do after any bank data breach is freeze your credit at all three bureaus. It is free by federal law, takes a few minutes online, and blocks new accounts from being opened in your name, which is stronger protection than most paid monitoring services. See RecordingLaw's guide to freezing your credit after a data breach for the exact steps at Equifax, Experian, and TransUnion.

If you already had a freeze in place before filing a claim, you do not need to lift it to submit the claim form. If you notice suspicious activity on any account, report it at IdentityTheft.gov, which also builds a personal recovery plan.

The opt-out window for this settlement closed on June 29, 2026, and the objection deadline closed the same day, so if you wanted to preserve your own right to sue Flagstar separately over these breaches, or to tell the court the terms were unfair, those options are gone. With the August 11, 2026 claim deadline also passed, class members who never filed are bound by the release without a payment.

For other active recoveries like this one, RecordingLaw tracks open cases at its data breach settlement tracker.

Frequently Asked Questions

Is the Flagstar Bank data breach settlement still open?

No. The claim deadline was August 11, 2026, and the official settlement site now marks it passed, along with the June 29, 2026 deadlines to opt out and to object. The next dated step is the October 1, 2026 final approval hearing.

What caused the Flagstar Bank data breach settlement?

The settlement resolves Angus v. Flagstar Bank, N.A., a class action over two data breaches at Flagstar Bank in January 2021 and December 2021 that Flagstar disclosed had impacted personal information. Flagstar has not admitted wrongdoing.

Who is eligible for the Flagstar Bank settlement?

You may be eligible if Flagstar identified your personal information as affected by the January 2021 or December 2021 breaches. The class covers about 2.19 million people nationwide, including a roughly 364,000-person California subclass.

How much money will I get from the Flagstar Bank settlement?

It depended on which benefits a claimant selected and how many people filed. The benefits could be combined: an estimated $60 residual payment capped at $599 with no documentation, reimbursement of documented losses up to $25,000, and, for people who lived in California at the time of the breaches, a California statutory payment of up to $100. These are estimates from a shared $31.5 million fund, not guaranteed amounts.

Does the Flagstar settlement include credit monitoring?

Yes. In addition to the cash payment options, eligible claimants could enroll in three years of three-bureau credit monitoring at no cost as part of the claim form.

Can I still opt out of the Flagstar Bank settlement?

No. The exclusion deadline was June 29, 2026, and the objection deadline closed the same day. With the August 11, 2026 claim deadline also passed, class members who never filed are bound by the settlement's release without a payment.

When will Flagstar settlement payments go out?

No payout date has been set. Money cannot go out until a judge grants final approval at the October 1, 2026 hearing, and no distribution timeline has been published beyond that.

Who is administering the Flagstar Bank settlement?

Eisner Advisory Group LLC, doing business as EisnerAmper, is administering the settlement through the official site, flagstarsettlement.com.

What should I do if I am not sure I got a breach notice from Flagstar?

Start by freezing your credit at all three bureaus, which is free and does not require proof you were affected. You can also check IdentityTheft.gov for recovery steps regardless of whether you file a claim in this settlement.