Frequently Asked Questions

A federal court authorized the Notice because you have a right to know about the proposed Settlement of this class action lawsuit, and about your options, before the Court decides whether to approve the Settlement. The Notice explains the lawsuit, the Settlement, your legal rights, what benefits are available, and how to get them.

For information on how to determine if you are a Settlement Class Member, and therefore eligible for benefits under this Settlement, see Questions 5-6.

On March 5, 2021, Flagstar announced that it had been the victim of cyberattack in January 2021 in which cyber criminals infiltrated a file sharing platform used by Flagstar and accessed the personally identifiable information (“PII”) of approximately 1.47 million individuals in the United States. On June 17, 2022, Flagstar announced that it had been the victim of a separate cyberattack in December 2021 in which cyber criminals infiltrated Flagstar’s network and accessed the PII of approximately 1.58 million individuals in the United States. Together, these two cyberattacks (the “Data Breaches”) impacted the personal information of approximately 2,187,170 U.S. consumers, including approximately 364,000 California residents.

This lawsuit was brought on behalf of consumers whose personal information was impacted as a result of the Data Breaches. Judge Matthew F. Leitman of the United States District Court for the Eastern District of Michigan is overseeing this lawsuit, which is known as Angus, et al. v. Flagstar Bank, N.A., Case No. 2:21-cv-10657-MFL-DRG. The consumers who brought this lawsuit are called “Plaintiffs” and the company they sued, Flagstar, is called “Defendant.” Plaintiffs claim that Flagstar did not adequately protect consumers’ personal information and that Flagstar delayed in providing notice of the Data Breaches.

The most recent version of this lawsuit, which describes the specific legal claims alleged by Plaintiffs, is available HERE. Flagstar denies these claims and says it did not do anything wrong. No court or other judicial entity has made any judgment or other determination that Flagstar has any liability for these claims or did anything wrong.

In a class action, one or more people called “Class Representatives” sue on behalf of themselves and all people who have similar claims. Together, all these people are called a “Class,” and the individuals are called “Class Members.” Because this is a class action, even persons who did not file their own lawsuit can obtain relief from harm that may have been caused by the Data Breaches, except for those who exclude themselves from the Class.

The Court has not decided in favor of Plaintiffs or Flagstar. Instead, both sides agreed to a settlement after a mediation process overseen by a retired federal judge. The Settlement avoids the cost and uncertainty of a trial and related appeals, while more quickly providing benefits to Settlement Class Members. The Settlement Class Representatives appointed to represent the Class and the attorneys for the Settlement Class (“Class Counsel,” see Question 20) believe the settlement is in the best interest of all Settlement Class Members.

Only members of the Settlement Class are eligible to receive benefits under the Settlement. You are a Settlement Class Member if you are among the approximately 2,187,170 U.S. consumers identified by Flagstar whose personal information was impacted by the Data Breaches.

Specifically excluded from the Settlement Class are:

• Flagstar, any entity in which Flagstar has a controlling interest, and of Flagstar’s officers, directors, legal representatives, Successors, Subsidiaries, and assigns;
• Any judge, justice, or judicial officer presiding over the Action and the members of their immediate families and judicial staff; and
• Any Settlement Class Member who timely and validly opts out of the Settlement Class (see Question 17).

Notice was sent via electronic and/or direct mail to all Settlement Class Members.

If you are not sure whether you are included in the Settlement, you may call the Settlement Administrator at 1-855-542-0397 with questions. You may also write with questions to:

Flagstar Settlement Administrator
P.O. Box 4427
Baton Rouge, LA 70821
or email: info@FlagstarSettlement.com

Flagstar will pay $31,500,000 into a Settlement Fund. The Settlement Fund will be used for the benefit of approximately 2,187,170 Settlement Class Members to:

• Make cash payments for Documented Monetary Losses of up to $25,000;
• Purchase Credit Monitoring Services;
• Make Residual Cash Payments estimated at $60, but up to $599 (subject to adjustment as set forth below);
• Make California Statutory Payments of up to $100;
• Pay the costs of notifying Settlement Class Members and administering the Settlement;
• Pay Service Awards to the Settlement Class Representatives, as approved by the Court;
• Pay Attorneys’ Fees, Costs, and Expenses, as approved by the Court (see Question 21).

The Residual Cash Payment amount shall be determined pro rata based on the amount remaining in the Settlement Fund following payment of the Attorneys’ Fees and Expenses, Service Awards, Administrative Costs, Credit Monitoring costs, claims for reimbursement of Documented Monetary Losses, and claims for California Statutory Payments.

The other Settlement benefits are also subject to pro rata reduction as needed in the event that the total claims exceed $31,500,000. Specifically, in the event that the aggregate amount of payments for unreimbursed Documented Monetary Losses and California Statutory Payments exceeds the remaining amount in the Settlement Fund after payment of Attorneys’ Fees and Expenses, Service Awards, Administrative Costs, and Credit Monitoring services, then each Settlement Class Member’s Claim for Documented Monetary Losses and California Statutory Payments shall be proportionately reduced and there will be no Residual Cash Payment.

Settlement Class Members who submit a claim are eligible to receive one or more of the following payments:

Settlement Benefit—Reimbursement for Documented Monetary Losses (up to $25,000). If you spent money to deal with fraud or identity theft that was fairly traceable to the Data Breaches, or to protect yourself from future harm, then you can submit a claim for reimbursement up to $25,000. Monetary Losses that are eligible for reimbursement may include, without limitation, the following:

• Unreimbursed losses relating to fraud or identity theft;
• Professional fees including attorneys’ fees, accountants’ fees, and fees for credit repair services;
• Costs associated with freezing or unfreezing credit with any credit reporting agency;
• Credit monitoring costs that were incurred on or after the Data Breaches through the date of Claim Form submission;
• Miscellaneous expenses such as notary, fax, postage, copying, mileage, and long-distance telephone charges.

This list provides examples only, and other losses or costs fairly traceable to the Data Breaches may also be eligible for reimbursement.

To be eligible for this benefit, Settlement Class Members must submit a valid Claim Form by August 11, 2026 with documentation of the Monetary Losses. This can include receipts or other documentation not “self-prepared” by you that document the costs incurred. “Self-prepared” documents such as handwritten receipts are, by themselves, insufficient to receive reimbursement, but can be considered to add clarity or support other submitted documentation. The Settlement Administrator will decide if your claim for Monetary Losses is valid.

Settlement Benefit—California Statutory Payment (up to $100). In addition to, or in the alternative to, submitting a claim for Documented Monetary Losses, Residual Cash Payment, and/or Credit Monitoring (see Question 9 below), Settlement Class Members who resided in California at the time of the Data Breaches may elect to receive a statutory cash payment of up to $100 on a claims-made basis (“California Statutory Payment”). To be eligible to receive the California Statutory Payment, California Settlement Class Members must submit their name, address, Unique Class Member ID number, and an attestation under penalty of perjury that they were residents of California at the time of the Data Breaches. Unless specifically requested by the Settlement Administrator, California Settlement Class Members need not submit any proof-of-residency documentation. To be eligible for this benefit, California Settlement Class Members must submit a valid Claim Form by August 11, 2026.

Settlement Benefit—Residual Cash Payment (estimated at $60). In addition to the above benefits, Settlement Class Members may also submit a claim for a Residual Cash Payment. The amount of this benefit shall be determined pro rata based on the amount remaining in the Settlement Fund following payment of the Attorneys’ Fees and Expenses, Service Awards, Administrative Costs, Credit Monitoring costs, claims for reimbursement of Documented Monetary Losses, and claims for California Statutory Payments. The Residual Cash Payment shall not exceed $599 per individual. Proposed Class Counsel estimate this payment will be approximately $60 based on expected claims rates, but this amount could be higher or lower. To be eligible for this benefit, Settlement Class Members must submit a valid Claim Form by August 11, 2026.

Settlement Benefit—Credit Monitoring Services. The Settlement provides a way to help protect yourself from unauthorized use of your personal information. Settlement Class Members may submit a claim to enroll in three (3) years of three-bureau credit monitoring services at no cost. These services include the following features:

• Three-bureau credit monitoring providing notice of changes to your credit report at all three national credit bureaus;
• $1 million in identity theft insurance protections;
• CyberScan Dark Web Monitoring;
• Fully Managed Identity Restoration services;
• Member Advisory Services; and
• Lost Wallet Assistance.

The credit monitoring services will be provided by IDX, the nation’s largest provider of incident response services, and trusted to protect over 100 million consumers. If you submit a valid Claim Form and elect to enroll in Credit Monitoring Services, you will receive enrollment instructions by email after approval of the Settlement.

You may make a claim for Credit Monitoring Services in addition to a claim for Reimbursement for Documented Monetary Losses, Residual Cash Payment, and/or (if applicable) a California Statutory Payment.

To be eligible for this benefit, you must submit a valid Claim Form by August 11, 2026.

To receive a benefit under the Settlement, you must complete and submit a Claim Form. The full Claim Form is available for completion online HERE. A tear-off Claim Form will also be mailed to Settlement Class Members. The tear-off Claim Form can be used for claims that do not require documentation, such as the Residual Cash Payment, Credit Monitoring Services, and California Statutory Payment. The tear-off Claim Form is not sufficient for the Documented Monetary Loss claim. If you intend to submit a claim for Documented Monetary Loss, you may submit a Claim Form online or through the mail.

Read the instructions carefully when filling out the Claim Form, provide the required documentation (as applicable), and submit the Claim Form according to the instructions on the Claim Form.

The deadline to submit a Claim Form is August 11, 2026 (this is the last day to file online and the postmark deadline for mailed Claim Forms).

The Settlement Administrator will decide whether and to what extent any claim made on each Claim Form is valid. The Settlement Administrator may require additional information. If you do not provide the additional information in a timely manner, then your claim will be considered invalid and will not be paid.

Settlement payments will be distributed as soon as possible if the Court grants final approval of the Settlement and after any appeals are resolved.

The Court will hold a Final Approval Hearing on October 1, 2026 at 9:30 a.m. ET to decide whether to approve the Settlement. If the Court approves the Settlement, there may be appeals from that decision and resolving those can take time, perhaps more than a year. It also takes time for all the Claim Forms to be processed. Please be patient.

Flagstar gets a release from all claims covered by this Settlement. Thus, if the Settlement becomes final and you do not exclude yourself from the Settlement, you will be a Settlement Class Member and you will give up your right to sue Flagstar and other persons (“Released Parties”) as to all claims (“Released Claims”) arising out of or relating to the Data Breaches. This release is described in the Settlement Agreement, which is available HERE. If you have any questions you can contact the Settlement Administrator (see Question 26).

No. If you exclude yourself, you will not be entitled to receive any benefits from the Settlement, but you will not be bound by any judgment in this case.

No. Unless you exclude yourself, you give up any right to sue Flagstar (and any other Released Parties) for the claims that this Settlement resolves. You must exclude yourself from the Settlement Class to start your own lawsuit or to be part of any different lawsuit relating to the claims in this case. If you want to exclude yourself, then do not submit a Claim Form to ask for any benefit under the Settlement.

To exclude yourself from the Settlement you must mail a “Request for Exclusion” postmarked no later than June 29, 2026 to:

Flagstar Settlement Administrator
Attn: Exclusion Request
P.O. Box 4427
Baton Rouge, LA 70821

This statement must contain the following information:

• The case name of the Action (Angus, et al. v. Flagstar Bank, N.A.)
• Your full name and address;
• Your personal signature; and
• The words “Request for Exclusion” or a similar statement clearly indicating that you intend to be excluded from the Settlement.

Requests for Exclusion seeking exclusion on behalf of more than one Settlement Class Member shall be deemed invalid by the Settlement Administrator.

If you do not comply with these procedures and the deadline for exclusions, you will lose any opportunity to exclude yourself from the Settlement Class, and your rights will be determined in this lawsuit by the Settlement Agreement if it is approved by the Court, and you may not recover under any other settlement agreement regarding the claims released as part of the Settlement.

You can tell the Court that you do not agree with the Settlement or some part of it by objecting to the Settlement. The Court will consider your views in its decision on whether to approve the Settlement. The Court can only approve or deny the Settlement and cannot change its terms. To object, you must mail your objection to the Clerk of the Court, at the mailing addresses listed below, postmarked by no later than June 29, 2026:

Clerk of Court
United States District Court for the Eastern District of Michigan
Theodore Levin U.S. Courthouse
231 W. Lafayette Blvd., Room 599
Detroit, MI 48226

Your objection must be written and must include all of the following:

• The case name and number of the Action (Angus, et al. v. Flagstar Bank, N.A., Case No. 2:21-cv-10657-MFL-DRG)
• Your full name, address, and telephone number;
• If represented by counsel, the full name, address, and telephone number of your counsel;
• A statement of whether the objection applies only to you, to a specific subset of the class, or to the entire class;
• A statement of the specific grounds for the objection; and
• A statement of whether you intend to appear at the Final Approval Hearing, and if so, whether personally or through counsel.

If you are represented by counsel and your counsel intends to speak at the Final Approval Hearing, your written objection must include:

• A detailed description of any evidence you may offer at the Final Approval Hearing and
• Copies of any exhibits you may introduce at the Final Approval Hearing.

To be considered by the Court, your objection must be either (a) electronically filed by June 29, 2026; or (b) mailed first-class postage prepaid to the Clerk of Court for the United States District Court for the Eastern District of Michigan and postmarked by no later than June 29, 2026.

Objecting is telling the Court that you do not like the Settlement and why you do not think it should be approved. You can object only if you are a Settlement Class Member.

Excluding yourself is telling the Court that you do not want to be part of the Class and do not want to receive any benefit from the Settlement. If you exclude yourself, then you have no basis to object because you are no longer a member of the Settlement Class and the case no longer affects you. If you submit both a valid objection and a valid request to be excluded, you will be deemed to have only submitted the request to be excluded.

Yes. The Court appointed John Yanchunis of Morgan & Morgan Complex Litigation Group and Norman Siegel of Stueve Siegel Hanson LLP as Class Counsel to represent the Class.

You will not be charged for their services. If you want to be represented by your own lawyer, then you may hire one at your own expense.

If you have questions about making a claim, please contact the Settlement Administrator. See Question 26.

Class Counsel will ask the Court for an award for attorneys’ fees up to $10,500,000, plus reasonable litigation costs and expenses of up to $500,000. This payment for any attorneys’ fees and expenses to Class Counsel will be made out of the Settlement Fund. Any such award would compensate Class Counsel for investigating the facts, litigating the case, and negotiating the Settlement and will be the only payment to them for their efforts in achieving this Settlement and for their risk in undertaking this representation on a wholly contingent basis.

Class Counsel will also ask the Court for Service Awards up to $2,500 for each of the Settlement Class Representatives for their services in representing the Class in this matter.

Any award for attorneys’ fees and expenses for Class Counsel and the Settlement Class Representative Service Awards must be approved by the Court. The Court may award less than the amount requested. Class Counsel’s papers in support of final approval of the Settlement will be filed no later than September 17, 2026, and their application for Attorneys’ Fees and Expenses and Service Award will be filed no later than June 8, 2026, and will be posted on this Settlement Website HERE.

The Court will hold a Final Approval Hearing at 9:30 a.m. ET on October 1, 2026, via Zoom videoconference. At this hearing, the Court will consider whether the Settlement is fair, reasonable, and adequate. If there are timely and valid objections, then the Court will consider them and will listen to people who have asked to speak at the hearing if such a request has been properly made. The Court will also rule on the request for an award of Attorneys’ Fees and reasonable Expenses, and Service Awards. After the hearing the Court will decide whether to approve the Settlement. We do not know how long these decisions will take. The hearing may be moved to a different date or time without additional notice, so Class Counsel recommend checking HERE or calling 1-855-542-0397.

No. Class Counsel will present the Settlement Agreement to the Court. You or your own lawyer are welcome to attend at your expense, but you are not required to do so. If you send an objection, you do not have to visit the Court to talk about it. As long as you filed your written objection on time with the Court and mailed it according to the instructions provided in Question 18, the Court will consider it.

You may ask the Court for permission to speak at the Final Approval Hearing. To do so, you must file an objection according to the instructions in Question 18, including all the information required.

If you do nothing you will not get any money from this Settlement. If the Court approves the Settlement and the judgment becomes final, then you will not be able to start a lawsuit, continue with a lawsuit, or be part of any other lawsuit against Defendant and the other Released Parties based on any of the Released Claims related to the Data Breaches, ever again.

If you have questions about the notice or the Settlement, you can contact the Settlement Administrator at 1-855-542-0397, by emailing info@FlagstarSettlement.com, or by mailing a letter to Flagstar Settlement Administrator, P.O. Box 4427, Baton Rouge, LA 70821 for more information or to request that claim form or a copy of this document be sent to you in the mail. If you wish to communicate directly with Class Counsel, you may contact them. You may also seek advice and guidance from your own private lawyer at your own expense, if you wish to do so.

The notice is only a summary of the lawsuit and the Settlement. Other related documents can be accessed through the Settlement Website HERE.

The Notice is approved by the United States District Court for the Eastern District of Michigan. PLEASE DO NOT CONTACT THE COURT DIRECTLY IF YOU HAVE QUESTIONS ABOUT THE SETTLEMENT. Please contact the Settlement Administrator if you have any questions.