Figure
Data Breach
www.figure.com970,759
Records Exposed
Jan 2026
Date of Breach
Database
Breach Type
Oct 2026
Added to Database
About This Breach
In January 2026, Figure, a US fintech lending platform (Figure Technology Solutions / Figure Lending) offering HELOCs and crypto-backed personal loans, was affected by a data breach exposing approximately 967,000 records. The compromised data included email addresses, first and last names, phone numbers, dates of birth and physical addresses, and for funded loans also included Social Security numbers and loan details such as amounts and status. Figure confirmed the incident and attributed it to a social engineering attack in which an employee was tricked into providing access. The data was published online by the threat actor ShinyHunters after a ransom was not paid, and was distributed via Telegram.
Compromised Data Types
Country
United States
Language
English
Category
Finance
Indexed On
Oct 2, 2026
Breach Type
Database
What Should You Do?
Get Full Breach Details with LeakedSource Pro
Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.
Sign Up for Pro- Watch for phishing emails targeting your inbox. Attackers may use your exposed email address to send convincing scam messages.
- Be alert to smishing attacks (SMS phishing). Scammers may text you pretending to be banks or service providers.
- Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
- Use a password manager to generate and store unique, strong passwords for every account.
Were You Affected by This Breach?
Enter your email below to instantly check if your data was compromised in the Figure breach and 12,000+ other known breaches.
