Fintech lending giant Figure confirms data breach

Figure Technology Confirms Data Breach

Figure Technology, a blockchain-based lending company, has confirmed that it recently experienced a data breach. The breach occurred when an employee fell victim to a social engineering attack, allowing hackers to steal a limited number of files.

The company’s spokesperson, Alethea Jadick, stated that Figure is working with partners to address the breach and is offering free credit monitoring to all individuals who may have been affected.

Despite the breach, Figure’s spokesperson did not provide specific details about the incident. However, the hacking group ShinyHunters has claimed responsibility for the breach on its dark web leak website. They stated that Figure refused to pay a ransom, leading them to publish 2.5 gigabytes of allegedly stolen data.

Upon review of the data by JS, it was found to contain customers’ full names, home addresses, dates of birth, and phone numbers. A member of ShinyHunters revealed that Figure was targeted as part of a larger hacking campaign that focused on customers who use the single sign-on provider Okta. Other victims of this campaign include prestigious institutions like Harvard University and the University of Pennsylvania (UPenn).