Flagstar Fined $3.5M for ‘Misleading’ After 2021 Cyberattack

After a hacker gained access to Flagstar’s Citrix environment in late 2021 and stole PII of 1.5 million customers, Flagstar “negligently made” materially misleading statements on its website and in financial filings, according to the SEC.