The once-mighty blockchain lending platform Figure is now reeling after confirming a massive data breach that exposed 2.5GB of sensitive customer information. The company made the grim announcement on February 13, 2026, following what investigators determined was a social engineering attack that compromised an employee account. Not the blockchain’s fault this time. Just plain old human error.
Another tech giant falls prey to the oldest trick in the hacker handbook: duping an employee.
ShinyHunters, a notorious hacking group, proudly claimed responsibility for the breach. They didn’t just steal the data—they flaunted it on dark web forums after Figure refused to pay their cryptocurrency ransom demand. Classic double-extortion playbook: steal, demand payment, then publish anyway. Figure stood their ground and refused to negotiate. Bold move. Let’s see how that works out for them.
The compromised data is a treasure trove for identity thieves. Full names, physical addresses, birth dates, and phone numbers—all neatly packaged in that 2.5GB file. The extent of any financial information exposure remains conveniently undisclosed. The company has yet to reveal exact numbers of affected customers. Customers are probably thrilled about that transparency.
Apparently, the attackers gained access through phishing or social engineering tactics targeting an employee. Some evidence suggests possible insider assistance or compromised credentials. Security team detected anomalous network activity and immediately initiated their incident response protocols. Even more concerning? The attack appears to be part of a larger campaign targeting organizations using Okta single sign-on services.
Figure’s response followed the standard corporate crisis playbook. They initiated incident response protocols, hired forensic specialists, notified affected customers, and offered free credit monitoring services. How generous after losing control of people’s personal information!
The fallout for customers could be severe. With their data now permanently available on the dark web, they face ongoing risks of identity theft and targeted phishing attacks. Figure might face regulatory penalties and reputation damage, but their blockchain infrastructure reportedly remains uncompromised. Small consolation for customers whose personal details are now being traded by cybercriminals like baseball cards.
