Figure Technology Suffers Major Data Breach Following Social Engineering Attack
Figure Technology, a prominent blockchain-based fintech lending platform, has officially confirmed a significant data breach incident. The company disclosed that the security compromise originated from a social engineering attack that successfully deceived an employee, enabling threat actors to exfiltrate a limited number of confidential files.
According to the company's official statement, Figure is actively collaborating with security partners and affected individuals, offering complimentary credit monitoring services to all impacted parties who receive breach notification. However, the organization has declined to provide detailed information regarding the scope and specific technical aspects of the incident.
ShinyHunters Claims Responsibility
The notorious hacking collective ShinyHunters has claimed responsibility for the breach through their official dark web leak platform. The threat actors alleged that Figure Technology refused to comply with ransom demands, prompting them to publish approximately 2.5 gigabytes of allegedly stolen data on underground forums.
Analysis of the leaked dataset revealed it contains sensitive personally identifiable information (PII), including:
• Customers' full legal names
• Residential addresses
• Dates of birth
• Contact phone numbers
Connection to Broader Okta-Related Campaign
A representative from ShinyHunters indicated that Figure Technology was compromised as part of a larger-scale hacking campaign targeting organizations utilizing Okta's single sign-on (SSO) infrastructure. This sophisticated operation has affected multiple high-profile institutions, including Harvard University and the University of Pennsylvania (UPenn), demonstrating the widespread impact of supply chain vulnerabilities in authentication systems.
This incident underscores the critical importance of comprehensive security awareness training and multi-layered defense strategies, particularly for organizations handling sensitive financial data in the fintech sector.
🔔 Stay tuned and subscribe →
Related news
Try these AI tools
Build multi‑agent AI workflows with 1200+ integrations, enterprise security, monitoring, and flexibl...
Deepengine delivers automated attack surface management, vulnerability scanning, pen testing, and co...
Experience AI-driven investment insights and analysis with TOGGLE AI's powerful fintech platform.
