Millions of current and former Flagstar Bank customers have a limited window to claim compensation from a $31.5 million class action settlement tied to two major data breaches that exposed sensitive personal information in 2021. Eligible consumers may receive reimbursement for documented financial losses of up to $25,000, along with additional cash payments and several years of complimentary identity protection services. The deadline to submit a valid claim is August 11, 2026, making it a key date for anyone who believes their information was compromised during the cyber incidents.
Who Qualifies for the Settlement and What Is Available
According to The Sun, the settlement covers individuals whose personally identifiable information was exposed during Flagstar Bank’s January and December 2021 data breaches. Court filings state that the cyberattacks affected more than 2 million customers, including approximately 364,000 California residents. Plaintiffs alleged that the bank failed to implement reasonable cybersecurity safeguards that could have prevented the incidents. Although Flagstar Bank has denied any wrongdoing or liability, it agreed to resolve the litigation through a $31.5 million settlement.
Eligible class members who experienced documented financial losses connected to the data breaches can seek reimbursement of up to $25,000. Qualifying losses may include fraudulent transactions, identity theft expenses, professional service fees, credit-related costs, and other out-of-pocket damages directly linked to the exposure of personal information. Claimants must provide supporting documentation to substantiate these losses as part of the claims process. The settlement is intended to compensate consumers who experienced measurable financial harm while avoiding the uncertainty and expense of continued litigation.
Credit: Canva
Additional Cash Payments and Credit Monitoring Benefits
Not every eligible customer must demonstrate significant financial losses to receive compensation. The settlement also provides for a residual cash payment estimated at approximately $60, although that amount could increase to as much as $599 depending on the total number of valid claims submitted and the distribution of remaining settlement funds. This structure means the final payment amount will depend on overall participation in the settlement.
California residents may also qualify for an additional statutory payment of up to $100, reflecting protections available under state privacy laws. Beyond direct financial compensation, every eligible class member can enroll in three years of complimentary credit monitoring services provided through IDX. The package includes monitoring across all three major credit bureaus, $1 million in identity theft insurance, dark web monitoring, identity restoration assistance, advisory services, and lost wallet support. These benefits are designed to help consumers detect and respond to potential misuse of their personal information following the breaches.
Important Deadlines Every Eligible Customer Should Know
Anyone wishing to participate in the settlement must submit a valid claim form no later than August 11, 2026. Consumers who prefer to exclude themselves from the settlement or file an objection must do so by June 29, 2026. The court’s final approval hearing is currently scheduled for October 1, 2026, when the judge will determine whether to grant final approval to the agreement.
Consumers who believe they may be affected should carefully review the settlement requirements and gather any documentation supporting financial losses before filing a claim. Even individuals who did not experience direct monetary losses may still qualify for cash benefits and the extensive identity protection services included in the settlement. With millions of customers potentially eligible, those who were impacted by the 2021 Flagstar Bank data breaches have a limited opportunity to secure compensation before the filing deadline arrives.
