The personal information of nearly one million Figure Technology customers has been compromised following a social engineering attack on the blockchain-based lender.
Editorial
This content has been selected, created and edited by the Finextra editorial team based upon its relevance and interest to our community.
Hackers stole Figure customers’ email addresses, names, dates of birth, physical addresses, and phone numbers, according to the Have I Been Pawned breach notification site.
Figure has provided little detail on the attack but told TechCrunch that an employee was tricked by a social engineering attack that saw the theft of “a limited number of files”.
Hacking group ShinyHunters has claimed responsibility and posted 2.5 gigabytes of data on its website, where it publishes stolen data if hacked companies do not pay a ransom.
Figure was co-founded by industry veteran Mike Cagney. Cagney previously built fintech SoFi but left in 2017 amid sexual harassment allegations.
The company connects origination, funding, and secondary market activity, claiming more than 200 partners for its loan origination system and capital marketplace. The firm and its partners have originated over $22 billion of home equity and it went public last year.