Flagstar Bank data breach expands to customers

Michigan-based Flagstar Bank, which has a Houghton branch location, disclosed earlier this week that a ransomware attack was broader than it initially thought, and does involve customer data. For nearly a month, the company has been subject of extortion attempts from a hacker group named Cl0p, due to a data breach through a third party vendor. Flagstar used a corporation named Accellion to share files between multiple locations. Cl0p was able to hack that application and gain a treasure trove of information, namely social security numbers along with full names and home addresses.

At first, the hacker group leaked employee information. When Flagstar became aware, they began their own investigation into how extensive the breach was. Cl0p is now applying the same extortion tactics to customers. Flagstar has taken steps to notify those it believes are affected. Be on the lookout for information delivered via the mail. The company has operations in Houghton, with a branch on College Avenue that sits across US-41 from Michigan Technological University.

Flagstar’s website has a section with advice and preventative measures customers can take. Keweenaw Report has reached out to see if there are any additional tips being suggested. We have been redirected to a representative from the corporate office and will update this story if we receive a response.