Flagstar Bank discloses a massive data breach in its banking system during a cyberattack in December in which the hackers gained access to the personal information of more than a million Flagstar Bank customers.
Flagstar is a Michigan-based financial services provider and one of the largest banks in the United States, with total assets of over $30 billion.
The bank is notifying its 1.5 million customers and according to data breach notifications Flagstar experienced a security incident in December 2021 when intruders breached the bank’s corporate network.
After being aware of the attack, the bank promptly activated its incident response plan, engaged external cybersecurity professionals experienced in handling these types of incidents, and reported the matter to federal law enforcement.
After an investigation, the bank discovered on June 2nd that the threat actors accessed sensitive customer details, including full names and social security numbers.
However, they do not have evidence that any of the information has been misused.
Flagstar is providing free two years of identity monitoring and protection services to impacted individuals.
As per the information submitted to the Office of the Maine Attorney General, the data breach affected 1,547,169 people in the United States.
This is the second major security incident to impact Flagstar and its customers in a year. In January 2021, the ransomware gang Clop breached the bank’s servers by exploiting a zero-day vulnerability in Accellion FTA servers.
Comments