2026 Figure Technology Solutions — 967K accounts (ShinyHunters vishing)
Data compromised
Names, emails, phone numbers, addresses, dates of birth
Technical writeup
Figure Technology Solutions, a blockchain-based fintech lender, suffered a data breach in January 2026 via ShinyHunters voice phishing. Attackers impersonated IT support to obtain employee SSO credentials and MFA codes. ~2.5GB of data exfiltrated; ~967K user accounts affected. Names, emails, phones, addresses, DOB exposed; SSNs and customer funds not compromised. Disclosed Feb 13, 2026.
Root cause
Voice phishing; stolen SSO/MFA credentials