Data breach
Figurefigure.com
967 178 accounts exposed in a breach dated 2026-01-28.
Breached2026-01-28Added to HIBP2026-02-18 UTCUpdated by HIBP2026-02-18 UTCAccounts967 178Domainfigure.com
Verified
What happened in Have I Been Pwned’s words
In February 2026, data obtained from the fintech lending platform Figure was publicly posted online. The exposed data, dating back to January 2026, contained over 900k unique email addresses along with names, phone numbers, physical addresses and dates of birth. Figure confirmed the incident and attributed it to a social engineering attack in which an employee was tricked into providing access.
Exposed data as HIBP classifies it
- Dates of birth
- Email addresses
- Names
- Phone numbers
- Physical addresses
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC