Breachesby GlyphFigure
Disclosed Feb 13, 2026967,178 accountsUnverified
Fintech Figure breach via social engineering exposes nearly 1 million accounts
Lending platform Figure confirmed an employee was tricked into handing over access, and ShinyHunters leaked 2.5 GB of data. Have I Been Pwned counted 967,200 accounts with names, contact details, addresses and birth dates.
What is known
| People affected | 967,178 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Feb 13, 2026 |
| Discovered | Feb 2026 |
| Happened | Jan 28, 2026 |
| Attack | Phishing |
| Data exposed | Dates of birthEmailsNamesPhone numbersAddresses |
| Sector | Finance · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
aggregator to pressby seedSource
https://haveibeenpwned.com/Breach/Figure to https://techcrunch.com/2026/02/13/fintech-lending-giant-figure-confirms-data-breach/by seedSource
empty to USby seedSource
tech to financeby seedSource
2026-02-18 to 2026-02-13by seedSource
empty to 2026-02by seedSource
In February 2026, data obtained from the fintech lending platform Figure was publicly posted online . The exposed data, dating back to January 2026, contained over 900k unique email addresses along with names, phone numbers, physical addres to Lending platform Figure confirmed an employee was tricked into handing over access, and ShinyHunters leaked 2.5 GB of data. Have I Been Pwned counted 967,200 accounts with names, contact details, addresses and birth dates.by seedSource
empty to Fintech Figure breach via social engineering exposes nearly 1 million accountsby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.