Blockchain lender Figure Technology Solutions suffered a massive data breach affecting nearly 967,000 users after an employee fell for a social engineering attack. The ShinyHunters hacker group claims responsibility, posting over 2.4GB of stolen files on their dark web site.
The compromised data includes names, birth dates, email addresses, home addresses, and phone numbers of Figure customers. The Nasdaq-listed fintech company specializes in blockchain-based home equity loans and mortgages.
ShinyHunters says Figure was targeted as part of a broader Okta campaign using voice phishing to compromise single sign-on accounts. Other victims include Betterment, Crunchbase, and Panera Bread.
Source: Security Week