DisclosureLens
HackingFinancial ServicesFinanceHacking OtherCustomer Data InvolvedIdentity (basic)Government IDCriticalResolved

Flagstar Bank, National Association

bd_9ac79c69f9794556 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jan 24, 2021

Filed

Mar 15, 2021

To disclose

7 weeks

Affected · nationwide

1,465,0022,314 in this filing

Linked

8 filings

Confidence

50%
Full breach record for Flagstar Bank, National Association →7 incidents on file

Flagstar Bank, FSB, a financial services company, reported a data breach that occurred between January 20, 2021, and January 22, 2021. The breach, discovered on January 24, 2021, was a result of an external system hack. The incident affected 2,314 Maine residents, compromising their names and Social Security numbers. In response, the bank offered credit monitoring and identity repair services through Kroll.

Maine clock✓ ME CRA notice due7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 4 days
discovery → filing · 7 weeks / 50 days

Jan 20, 2021

Begins

Jan 24, 2021

Discovered

Mar 15, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 8 filings about the same incident.View merged incident
Part of Accellion supply-chain incident (2021) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 3d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.