Flagstar Bank

[12][13][14] Flagstar paid a $93.5-million settlement to Fannie Mae in November 2011,[15][16] and $8.9 million to Freddie Mac regarding its RMBS mortgage repurchase obligations in December 2013.

[22] Flagstar Bank was the jersey sponsor of the Detroit Pistons of the National Basketball Association for the 2017-18 NBA Season.

[27] Flagstar waived fees, added staff and published an email address where customers could send concerns to alleviate issues.

The agreement did not include about $4 billion linked to Signature's crypto business, which the FDIC said it intended to deal with directly.

In February 2013, a U.S. District court in Manhattan found that the bank had materially breached contracts specifying the quality and characteristics of loans to be packaged into the securities.

[39] The bank “negligently made” materially misleading statements after a hack that resulted in the theft of 1.5 million customers’ personally identifying information.

Flagstar Bank must pay $3.5 million to the Securities and Exchange Commission for making allegedly misleading statements about a 2021 cyberattack, the agency said this week.

The commission also found that in a June 17, 2022, notice to customers and an August 9, 2022, securities filing, the bank made misleading statements regarding the scope of the Citrix breach.

Flagstar Bank must pay $3.5 million to the Securities and Exchange Commission for making allegedly misleading statements about a 2021 cyberattack, the agency said this week.

The commission also found that in a June 17, 2022, notice to customers and an August 9, 2022, securities filing, the bank made misleading statements regarding the scope of the Citrix breach.

Flagstar neither admitted nor denied the commission’s allegations, but it consented to the $3.5 million penalty and a cease-and-desist order barring it from making misleading statements in the future.

The cyberattack was the bank’s second of 2021, after bad actors took advantage of a flaw in Accellion’s File Transfer Appliance software, which Flagstar was using to protect sensitive information.