Security News > 2022 > June > Info on 1.5m people stolen from US bank in cyberattack

A US bank has said at least the names and social security numbers of more than 1.5 million of its customers were stolen from its computers in December.

In a statement to the office of Maine's Attorney General this month, Flagstar Bank said it was compromised between December and April 2021.

"Flagstar experienced a cyber incident that involved unauthorized access to our network," the bank said in a statement emailed to The Register.

The bank has offered affected customers identity theft protection services, and late last week mailed letters [PDF] notifying everyone who may have had their data stolen.

Those customers sued the bank after that intrusion, and in September 2021, Flagstar agreed to pay $5.9 million to settle the lawsuit.

In a statement provided to The Register following the latest breach disclosure, a spokesperson for the bank said: "We take the security of our network and the personal information entrusted to us with the utmost seriousness."

News URL

https://go.theregister.com/feed/www.theregister.com/2022/06/21/flagstar_bank_breached_ssn/