logo

Fintech firm Figure disclosed data breach after employee phishing attack

ID: 40e6ce5b-1b7d-5dcb-a368-fb66b5d9d925

STIX ID: report--40e6ce5b-1b7d-5dcb-a368-fb66b5d9d925

Feed Name: Security Affairs

Threat Score
65/100

Date Published: 2026-02-14

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

Figure, a US blockchain-based lending firm, disclosed a data breach after an employee fell for a social engineering/phishing attack that allowed attackers to steal files; cybercrime group ShinyHunters claimed responsibility and released roughly 2.5GB of data containing names, addresses, birth dates, and phone numbers, while Figure is notifying impacted individuals and offering free credit monitoring.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.