Figure Technology Confirms Customer Data Breach

Figure Technology, a New York-based blockchain lending company, confirmed on Friday that it suffered a customer data breach after an employee fell victim to a social engineering attack, allowing hackers to access and steal sensitive information.

The breach occurred when the employee was deceived into providing access to company systems, enabling the unauthorized download of a limited number of files. Figure acted swiftly to block the activity and hired a forensic firm to assess the affected data. The company has begun notifying impacted individuals and is providing complimentary credit monitoring and identity theft protection to those who receive notices. "We recently identified that an employee was socially engineered, and that allowed an actor to download a limited number of files through their account," Figure stated. "We are communicating with partners and impacted parties, as well as implementing additional safeguards."

The hacking group ShinyHunters claimed responsibility for the incident on its dark web site, stating that Figure refused to pay a demanded ransom. The group released approximately 2.5 gigabytes of stolen data, which included customers' full names, home...