Figure data breach
967,178 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
Dates of birthEmail addressesNamesPhone numbersPhysical addresses
What to do
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Be wary of texts and calls that seem to know your details.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In February 2026, data obtained from the fintech lending platform Figure was publicly posted online. The exposed data, dating back to January 2026, contained over 900k unique email addresses along with names, phone numbers, physical addresses and dates of birth. Figure confirmed the incident and attributed it to a social engineering attack in which an employee was tricked into providing access.