Figure Fintech Breach Hits Nearly 1M Customers - AI News Today Recency

# Figure Fintech Breach Hits Nearly 1M Customers: What You Need to Know

Figure Technology Solutions, a blockchain-based lending platform, confirmed a significant data breach affecting nearly 1 million customer accounts after hackers exploited a social engineering attack targeting an employee[3][4]. The incident exposed sensitive personal information including names, addresses, dates of birth, and phone numbers, prompting the company to offer free credit monitoring services to affected individuals[1][2].

How the Breach Occurred

The breach originated through a social engineering attack targeting a Figure employee, who was tricked into providing unauthorized access to company systems[1][2]. Once inside, attackers gained access to the employee's account and were able to steal what Figure characterized as "a limited number of files."[1] The incident was part of a broader hacking campaign by the group ShinyHunters that exploited vulnerabilities in Okta, a single sign-on provider used by numerous organizations[1][3]. Other victims of this same campaign include Harvard University, the University of Pennsylvania, and Match Group, which owns dating services like Tinder and OkCupid[3].

The exposed data dated back to January 2026, and the breach remained undetected until ShinyHunters published approximately 2.5 gigabytes of stolen data on a dark web leak site in mid-February[1][2][3]. According to Have I Been Pwned, the leaked information contained over 900,000 unique email addresses along with customers' full names, phone numbers, physical addresses, and dates of birth[3][4].

What Information Was Compromised

The personally identifiable information (PII) exposed in the breach includes[1][3][4]:

- Full names - Home addresses - Dates of birth - Phone numbers - Email addresses (over 900,000 unique addresses)

Security experts warn that this combination of data makes individuals vulnerable to identity theft, phishing attempts, and fraud[1][5]. The information could be weaponized by cybercriminals for various malicious purposes, from creating fake accounts to targeting victims with sophisticated social engineering schemes.

Company Response and Customer Protections

Figure Technology has taken several steps to address the breach and mitigate potential harm to affected customers[1][2]. The company stated it is "communicating with partners and those impacted" and is offering free credit monitoring services to all individuals who receive a breach notification[1][2].

However, Figure has not publicly disclosed the total number of affected customers—the 967,200 account figure comes from Have I Been Pwned's analysis rather than an official company statement[3]. The company's spokesperson declined to answer specific questions about the breach's scope and timeline[1].

The incident has also sparked legal action, with law firm Lynch Carpenter, LLP investigating claims against Figure on behalf of affected customers as of February 17, 2026[7].

Market Impact and Industry Implications

Despite the severity of the breach, Figure's stock price rose 3.57% following the disclosure, suggesting investors viewed the incident as a contained operational issue rather than a liquidity threat[6]. Figure Technology went public in September 2025 on the Nasdaq Stock Exchange with an initial valuation between $5.3 billion and $7.6 billion[5].

The primary financial risk to Figure stems from potential user trust erosion rather than direct balance sheet damage[6]. For a blockchain lending firm dependent on customer confidence, the reputational impact could affect future customer acquisition and deposit growth. The breach reflects a broader industry trend where human vulnerability through social engineering has become a more effective attack vector than exploiting code vulnerabilities[6].

ShinyHunters claimed responsibility for the hack and stated that Figure refused to pay a ransom, leading to the public data release[1][2][3]. The group has been active in recent weeks, claiming similar breaches at Canada Goose, Panera Bread, Betterment, SoundCloud, and CrowdStrike[3].

Frequently Asked Questions

How many customers were affected by the Figure data breach?

According to Have I Been Pwned, approximately 967,200 customer accounts were compromised in the breach[3][4]. However, Figure Technology has not officially confirmed the exact number of affected individuals, only stating that a "limited number of files" were stolen[1].

What personal information was exposed in the breach?

The exposed data includes full names, home addresses, dates of birth, phone numbers, and email addresses[1][3][4]. This combination of information can be used for identity theft, phishing attacks, and fraudulent account creation.

Who was responsible for hacking Figure Technology?

The hacking group ShinyHunters claimed responsibility for the breach[1][2][3]. The group published the stolen data on its dark web leak site after Figure allegedly refused to pay a ransom demand[1][2].

Is Figure offering any protection to affected customers?

Yes, Figure is offering free credit monitoring services to all individuals who receive a breach notification[1][2]. The company is also communicating directly with affected customers and partners to mitigate potential harm.

How did the hackers gain access to Figure's systems?

The breach occurred through a social engineering attack targeting a Figure employee, who was tricked into providing unauthorized access to company systems[1][2][3]. The attack was part of a larger campaign exploiting vulnerabilities in Okta, a single sign-on provider[1][3].

What should I do if my information was exposed in the Figure breach?

If you believe your information was compromised, enroll in the free credit monitoring service offered by Figure[1][2]. Monitor your credit reports for suspicious activity, consider placing a fraud alert or credit freeze with credit bureaus, and remain vigilant against phishing attempts and identity theft schemes[3][4].