Fintech lending giant Figure confirms data breach

Figure Technology disclosed a data breach after an employee was targeted via social engineering; the hacking group ShinyHunters claimed responsibility, published 2.5 GB of alleged customer data (including full names, addresses, dates of birth, and phone numbers), and stated the company declined to pay a ransom. The group said the compromise was part of a wider campaign affecting organizations that use Okta single sign-on, with other reported victims including Harvard and UPenn; Figure is notifying impacted individuals and offering credit monitoring.