Figure
Disclosed Feb 13, 20267 months ago967,178 accountsUnverified
Fintech Figure breach via social engineering exposes nearly 1 million accounts
Lending platform Figure confirmed an employee was tricked into handing over access, and ShinyHunters leaked 2.5 GB of data. Have I Been Pwned counted 967,200 accounts with names, contact details, addresses and birth dates.
What is known
| People affected | 967,178 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Feb 13, 2026 |
| Discovered | Feb 2026 |
| Happened | Jan 28, 2026 |
| Attack | Phishing |
| Data exposed | Dates of birth, Emails, Names, Phone numbers, Addresses |
| Sector | Finance · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Figurehaveibeenpwned.com · Aggregator | Aggregator |
| Fintech lending giant Figure confirms data breachtechcrunch.com · News | News |
| Data breach at fintech firm Figure affects nearly 1 million accountsbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Feb 13 | |
| Have I Been Pwnedaccounts in the data | Feb 18 | 967,178 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Figure to https://techcrunch.com/2026/02/13/fintech-lending-giant-figure-confirms-data-breach/ · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to finance · seed source
- 2026-09-25 · disclosed: 2026-02-18 to 2026-02-13 · seed source
- 2026-09-25 · discovered: empty to 2026-02 · seed source
- 2026-09-25 · summary: In February 2026, data obtained from the fintech lending platform Figure was publicly posted online . The exposed data, dating back to January 2026, contained over 900k unique email addresses along with names, phone numbers, physical addres to Lending platform Figure confirmed an employee was tricked into handing over access, and ShinyHunters leaked 2.5 GB of data. Have I Been Pwned counted 967,200 accounts with names, contact details, addresses and birth dates. · seed source
- 2026-09-25 · title: empty to Fintech Figure breach via social engineering exposes nearly 1 million accounts · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.