NEARLY 1 million user records have been compromised in a data breach at blockchain-powered lender Figure Technology Solutions, with the company confirming to TechCrunch that attackers accessed a limited number of files after an employee fell victim to a social engineering attack. The ShinyHunters hacker group took credit for the incident, and on its leak site it published more than 2.4GB of archive files allegedly containing stolen data.
Have I Been Pwned has analysed the leak and identified roughly 967,000 Figure user records exposed, including names, dates of birth, email addresses, postal addresses and phone numbers. Figure Technology Solutions is Nasdaq-listed and focuses on blockchain-based home equity lending and mortgage services. The report notes that the attack was part of the wider Okta phishing campaign targeting SSO accounts that attackers could leverage to access sensitive data. According to TechCrunch, the breach involved a limited data set, but the breach is nonetheless being treated as significant by analysts.