Publicly listed blockchain company Figure confirms customer data breach.

PANews reported on February 14th that, according to Decrypt, publicly traded blockchain lending company Figure Technology confirmed a customer data breach caused by a social engineering attack on an employee. Figure stated that the attacker downloaded a "limited number of files" through the employee's account. The company has quickly halted the activity and hired a forensics firm to investigate the scope of the affected files. The hacking group ShinyHunters claimed responsibility for the attack and, claiming Figure refused to pay the ransom, has released 2.5GB of stolen data. The leaked information includes customer names, addresses, dates of birth, and phone numbers.

ShinyHunters members stated that the attack was part of a larger campaign targeting companies using single sign-on service provider Okta, with Harvard University and the University of Pennsylvania also reportedly among the victims. Figure stated that it is communicating with partners and affected parties and strengthening security measures, and will provide free credit monitoring services to all notified individuals.