Figure Technology hit by data breach after social-engineering attack, customer details exposed

ShinyHunters claims responsibility as blockchain lender confirms limited file access

Figure Technology, a Nasdaq-listed blockchain lending firm, has confirmed a data breach stemming from a social-engineering attack targeting one of its employees. The intrusion allowed attackers to access what the company described as “a limited number of files,” though it has not disclosed how many customers were affected or when the breach was first detected.

In a statement to TechCrunch, Figure said it has begun notifying impacted individuals and is offering complimentary credit-monitoring services. The company has not publicly detailed the full scope of the incident. Requests for further comment were not answered by the time of publication.

The hacking collective ShinyHunters has claimed responsibility for the breach, alleging that Figure declined to pay a ransom. The group reportedly published around 2.5 gigabytes of data on its dark-web leak site.

ShinyHunters publishes stolen data. Source: Dominic Alvieri

Personal information exposed, fraud risks increase

Samples of the leaked material reviewed by TechCrunch reportedly included customers’ full names, home addresses, dates of birth and phone numbers — a combination of data points that could facilitate identity theft or targeted phishing campaigns.

The incident comes amid a broader shift in crypto-related fraud trends. While phishing losses fell sharply in 2025 — down 83% year over year to $83.85 million, according to Scam Sniffer — researchers caution that activity still closely tracks market cycles. Losses spiked during periods of strong trading activity, including Ethereum’s third-quarter rally, underscoring how threat actors adapt to liquidity and user engagement patterns rather than disappearing entirely.

Public listing and expansion into tokenized equities

The breach arrives at a pivotal time for Figure Technology. The company went public in September, raising $787.5 million in its IPO at $25 per share and securing an initial valuation between $5.3 billion and $7.6 billion.

More recently, Figure launched its On-Chain Public Equity Network (OPEN), built on its Provenance blockchain. The platform enables companies to issue tokenized equity and allows investors to lend or pledge shares without relying on traditional brokers or custodians — positioning Figure at the forefront of tokenized financial infrastructure.

The breach could test investor confidence as the firm seeks to expand its role in regulated blockchain finance.