Home > Consumer Information > Privacy, Identity Theft and Data Security Breaches > Data Breach Notifications
Data Breach Notifications
Entity Information
- Type of Organization: Financial Services
- Entity Name: Flagstar Bank, N.A. - Vendor MOVEit Incident (Fiserv) - Updated
- Street Address: 5151 Corporate Drive
- City: Troy
- State, or Country if outside the US: Michigan
- Zip Code: 48098
Submitted By
- Name: William Ridgway
- Title: Mr.
- Firm name (if different than entity): Skadden, Arps, Slate, Meagher & Flom LLP
- Telephone Number: 312.407.0449
- Email Address: william.ridgway@skadden.com
- Relationship to entity whose information was compromised: Legal Counsel
Breach Information
- Total number of persons affected (including residents): 838,073
- Total number of Maine residents affected: 177
- If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
- Date(s) Breach Occured: 05/27/2023-05/31/2023
- Date Breach Discovered: 06/03/2023 (this is an estimate as the breach did not occur at Flagstar)
- Description of the Breach:
- External system breach (hacking)
- Information Acquired - Name or other personal identifier in combination with: Social Security Number
Notification and Protection Services
- Type of Notification: Written
- Date(s) of consumer notification: 10/06/2023 (supplemental consumer notifications were sent after this date as needed)
- Copy of notice to affected Maine residents: Flagstar Consumer Notification Template.pdf
- Date of any previous (within 12 months) breach notifications: 10/05/2023; 11/05/2023
- Were identity theft protection services offered: Yes
- If yes, please provide the duration, the provider of the service and a brief description of the service: Two years; Kroll; Credit Monitoring, Fraud Consultation, and Identity Theft Restoration