Blockchain Lender Figure Confirms Customer Data Breach
TL;DR
Figure Technology confirmed a customer data breach due to a social engineering attack on an employee. The hacking group ShinyHunters published stolen data, including personal details, after Figure refused to pay a ransom.
Source: Decrypt
Figure Technology (NASDAQ: FIGR) confirmed Feb. 13 that it suffered a customer data breach after an employee was targeted in a social engineering attack. The hacking group ShinyHunters claimed responsibility, saying Figure refused to pay a ransom and that it published 2.5 gigabytes of stolen data. TechCrunch said that it reviewed some of the files, which included customers’ full names, home addresses, dates of birth, and phone numbers. “We recently identified that an employee was socially engineered, and that allowed an actor to download a limited number of files through their account,” Figure said in a statement shared with Decrypt. “We acted quickly to block the activity and retained a forensic firm to investigate what files were affected.” Figure went public in Sep. 2025 raising $787.5 million in an IPO that valued it at about $5.3 billion. Full Story