Data breach at fintech giant Figure affects close to a million customers

A significant data breach at the blockchain-based lending firm Figure has compromised the personal information of approximately 967,200 customers, as revealed by cybersecurity expert Troy Hunt. Last week, Figure acknowledged a security incident that permitted hackers to access a limited array of files from their systems. However, the company has yet to disclose the exact nature of the stolen data or the total number of affected customers. Upon investigating the leaked data, Hunt, who is also the founder of the well-known data breach notification platform Have I Been Pwned, uncovered that the compromised information includes not only unique email addresses but also sensitive details such as customer names, birth dates, physical addresses, and phone numbers. Figure has not responded to inquiries regarding the incident, including whether they contest Hunt's analysis. The cybercriminal group known as ShinyHunters has claimed responsibility for the breach, announcing their involvement in an interview with TechCrunch last week. They allegedly released 2.5 gigabytes of data from Figure on their leak site, which is notorious for publishing stolen information as a means of shaming victims into compliance with their extortion demands.