Blockchain lending firm Figure Technology has confirmed a data breach after attackers used social engineering to compromise an employee. The hacking group ShinyHunters claimed responsibility and leaked about 2.5 gigabytes of data after allegedly being denied a ransom. The leaked information includes customer names, addresses, and dates of birth, posing risks of identity fraud and phishing.
Figure Technology suffered a data breach following a social-engineering attack on an employee. A company spokesperson stated hackers obtained “a limited number of files” and that affected parties are being notified.
The hacking collective ShinyHunters claimed responsibility, alleging the company declined a ransom demand. The group published roughly 2.5 gigabytes of data purportedly stolen from Figure’s systems.
Samples of the leaked data included customers’ full names, home addresses, dates of birth and phone numbers. This personal information could be used for identity fraud and targeted phishing attempts.
Data from a Web3 security firm shows crypto phishing losses fell to $83.85 million in 2025, an 83% decline from the previous year. Losses closely tracked market activity, peaking during periods of heavy onchain trading.
Figure Technology went public on the Nasdaq Stock Exchange in September last year. Its IPO priced at $25 per share, raising $787.5 million and achieving a valuation between $5.3 billion and $7.6 billion.
Last month, the firm launched the On-Chain Public Equity Network on its Provenance blockchain. This platform allows companies to issue real shares and enables direct peer-to-peer lending or pledging of those shares.
