Figure Technology

Summary

Figure Technology experienced a data breach in which personal data was accessed through database queries of loan and inquiry records. The compromised information included names, Social Security numbers, addresses, phone numbers, email addresses, dates of birth, loan account numbers, and loan details. Nearly one million users were affected by the incident. Following the discovery, the company launched an investigation and a national class action law firm began investigating potential legal claims on behalf of those impacted.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On January 28, 2026, Figure Technology, operating as Figure Lending Corp., experienced a security incident in which personal data was accessed through database queries targeting loan and inquiry records. The company identified the breach after conducting an internal investigation that revealed unauthorized retrieval of information from its systems. Figure Lending Corp. is a fintech firm that employs blockchain technology to provide services such as quick home equity loans, refinancing options, and crypto‑backed lending. The investigation determined that certain personal data may have been acquired, including names, Social Security numbers, residential addresses, telephone numbers, email addresses, dates of birth, loan account numbers, and detailed loan information.

Edelson Lechtzin LLP, a national class action law firm, announced on April 9, 2026, that it is actively investigating data privacy claims stemming from the Figure Lending Corp. breach. The firm stated that it is pursuing a class action seeking legal remedies for individuals whose sensitive personal data may have been compromised in the incident. As part of its outreach, Edelson Lechtzin LLP offers free confidential consultations to affected individuals who wish to discuss their potential rights and claims. The firm provided contact details for its lead attorney, Marc Edelson, Esq., including an office address in Newtown, Pennsylvania, a telephone number, an email address, and a website URL.

The press release noted that individuals who received a data breach notification may be at increased risk of identity theft and fraud as a consequence of the exposed information. No further specifics about the attackers, the exact number of records accessed, or any remedial technical measures taken by Figure Technology were disclosed in the source material. The narrative presented here reflects only the factual chronology, scope of compromised data, and the legal response actions described in the provided article.

Sources

Sources available to members: 1 source.