Data Breach Notifications

Entity Information

  • Type of Organization: Financial Services
  • Entity Name: Flagstar Bank, N.A. - Vendor MOVEit Incident (FIS) - Updated
  • Street Address: 5151 Corporate Drive
  • City: Troy
  • State, or Country if outside the US: Michigan
  • Zip Code: 48098

Submitted By

  • Name: William Ridgway
  • Title: Mr.
  • Firm name (if different than entity): Skadden, Arps, Slate, Meagher & Flom LLP
  • Telephone Number: 312.407.0449
  • Email Address: william.ridgway@skadden.com
  • Relationship to entity whose information was compromised: Legal Counsel

Breach Information

  • Total number of persons affected (including residents): 25,891
  • Total number of Maine residents affected: 22
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 05/27/2023-05/31/2023
  • Date Breach Discovered: 08/08/2023
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with:

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 11/06/2023 (supplemental consumer notifications were sent after this date as needed)
  • Copy of notice to affected Maine residents: ELN-19964 Flagstar 3 Ad CM 2Y FIS r4prf.pdf
  • Date of any previous (within 12 months) breach notifications: 10/05/2023; 11/05/2023
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: Two years; Kroll; Credit Monitoring, Fraud Consultation, and Identity Theft Restoration