2026 Figure Technology — 967K accounts (ShinyHunters)
Data compromised
Email addresses, names, phone numbers, physical addresses, dates of birth
Technical writeup
Hackers breached the blockchain-based fintech Figure Technology Solutions through a social engineering attack. The ShinyHunters extortion group claimed responsibility and leaked 2.5GB of data allegedly stolen from thousands of loan applicants. Exposed data included over 900k unique email addresses along with names, phone numbers, physical addresses, and dates of birth. Figure attributed the incident to an employee being tricked into providing access.
Root cause
Social engineering; employee credential compromise