Figure Technology
Incident posture
Linked entities
- Victim
- Figure Technology
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
Figure Lending Corp. experienced a security incident in which attackers accessed its databases containing loan and inquiry records. The accessed information included names, Social Security numbers, addresses, phone numbers, email addresses, dates of birth, loan account numbers, and loan details, affecting nearly one million individuals. Following the discovery, the firm launched an investigation and a national class action law firm began examining potential privacy claims related to the breach.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
On January 28, 2026, Figure Technology experienced a security incident in which personal data was accessed through database queries targeting loan and inquiry records. The company, operating as Figure Lending Corp. (d/b/a Figure), identified that unauthorized queries had been executed against its internal databases containing loan and loan inquiry information. Following the detection of the anomalous activity, Figure Lending Corp. initiated an internal investigation to determine the scope and nature of the breach. The investigation confirmed that the access involved retrieval of personal data from the queried databases.
The investigation revealed that the compromised data may have included names, Social Security numbers, residential addresses, phone numbers, email addresses, dates of birth, loan account numbers, and details of loan transactions. Figure Lending Corp. describes itself as a fintech firm that utilizes blockchain technology to provide services such as quick home equity loans, refinancing options, and crypto‑backed lending. The exposed information pertains to individuals who had applied for or held loans through the company’s platform. The breach affected nearly one million users, according to the breach notification referenced in the press release.
Edelson Lechtzin LLP, a national class action law firm, announced that it is investigating potential legal claims arising from the Figure Lending Corp. data breach. The firm stated that it is seeking to pursue remedies on behalf of individuals whose sensitive personal data may have been compromised.
Sources
Sources available to members: 1 source.