Figure Lending Corp. Data Breach Exposes Sensitive Customer Information
On January 28, 2026, Figure Lending Corp. a fintech company specializing in blockchain-based home equity loans, refinancing, and crypto-backed lending detected unauthorized access to its databases. The breach involved queries targeting loan and inquiry records, resulting in the potential exposure of sensitive personal data.
Affected information includes names, Social Security numbers, addresses, phone numbers, email addresses, dates of birth, loan account numbers, and loan details. The company confirmed the incident following an internal investigation.
Edelson Lechtzin LLP, a national class action law firm, has launched an inquiry into potential legal claims on behalf of impacted individuals. The firm is evaluating options for those who received breach notifications, though no lawsuit has been filed at this time.
Figure Lending Corp., headquartered in Charlotte, N.C., has not disclosed the number of individuals affected or the method of unauthorized access. The breach highlights ongoing risks in fintech data security, particularly for companies handling high-value financial and personal information.
Figure cybersecurity rating report: https://www.rankiteo.com/company/figuretechnologies
"id": "FIG1775795401",
"linkid": "figuretechnologies",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Financial Services',
'location': 'Charlotte, N.C.',
'name': 'Figure Lending Corp.',
'type': 'Fintech Company'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Addresses',
'Phone numbers',
'Email addresses',
'Dates of birth',
'Loan account numbers',
'Loan details']},
'date_detected': '2026-01-28',
'description': 'Figure Lending Corp., a fintech company specializing in '
'blockchain-based home equity loans, refinancing, and '
'crypto-backed lending, detected unauthorized access to its '
'databases. The breach involved queries targeting loan and '
'inquiry records, resulting in the potential exposure of '
'sensitive personal data including names, Social Security '
'numbers, addresses, phone numbers, email addresses, dates of '
'birth, loan account numbers, and loan details.',
'impact': {'data_compromised': 'Sensitive personal data including names, '
'Social Security numbers, addresses, phone '
'numbers, email addresses, dates of birth, '
'loan account numbers, and loan details',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action inquiry',
'systems_affected': 'Databases containing loan and inquiry '
'records'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Edelson Lechtzin LLP'}],
'regulatory_compliance': {'legal_actions': 'Potential class action inquiry by '
'Edelson Lechtzin LLP'},
'title': 'Figure Lending Corp. Data Breach Exposes Sensitive Customer '
'Information',
'type': 'Data Breach'}