Figure Blockchain Lending Platform Suffers Data Breach Through Social Engineering Attack

Figure Technology, a blockchain-based lending platform, confirmed a data breach resulting from a social engineering attack. An employee was tricked into providing credentials, allowing unauthorized access to customer records. While the company emphasized its blockchain systems remained uncompromised, the incident highlights persistent vulnerabilities in human-factor security.

Approximately 2.5GB of sensitive data—including full names, addresses, birthdates, and contact information—was leaked by a hacker collective after alleged failed ransom negotiations. The exposure creates significant risks for identity fraud and targeted phishing campaigns, though the exact number of affected users remains undisclosed.

Notably, the breach didn't involve direct cryptocurrency theft or wallet compromises. However, security analysts warn that such personal data can enable sophisticated social engineering attacks against crypto holders, particularly through fake loan offers or account recovery scams.