- Fintech lender Figure Technology was breached via a social-engineering attack on an employee.
- The Hacking group ShinyHunters published roughly 2.5 GB of stolen data, including sensitive customer information.
- Leaked data contains names, addresses, birth dates, and phone numbers, raising risks of identity fraud.
- The company is notifying affected parties and offering free credit-monitoring services.
- Phishing losses in crypto fell sharply in 2025 but remain a significant threat.
Blockchain-based lending firm Figure Technology suffered a data breach in February 2026 after threat actors used social engineering to manipulate an employee. This incident gave attackers access to a limited number of files, as a company spokesperson confirmed to TechCrunch.
Figure has begun notifying affected individuals and is providing free credit-monitoring services. However, the exact scope of the breach, including the number of impacted users or the detection timeline, was not publicly disclosed.
Consequently, the hacking collective ShinyHunters claimed responsibility on its dark-web site, alleging the company refused to pay a ransom. The group subsequently released about 2.5 gigabytes of data purportedly stolen from Figure’s systems, as shown in a post by Dominic Alvieri.
According to reports, the leaked data contains customers’ full names, home addresses, dates of birth, and phone numbers. This sensitive information could be exploited for identity fraud and targeted phishing campaigns.
Meanwhile, crypto phishing attacks linked to wallet drainers fell dramatically in 2025. Data from Scam Sniffer shows total losses dropped 83% to $83.85 million, while victim counts fell 68% compared to 2024.
Researchers note losses still closely tracked market activity, peaking during periods of high onchain trading. Figure Technology had gone public just months before the breach, listing on the Nasdaq in September 2025 and raising $787.5 million.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
