Figure Technology, a blockchain-based lending firm, has reportedly suffered a data breach after attackers manipulated an employee in a social-engineering scheme. According to a company spokesperson speaking to TechCrunch, hackers gained access to “a limited number of files.” Figure has begun notifying affected individuals and is offering free credit-monitoring services to those who receive official breach notices. However, the company has not publicly disclosed how many users were impacted or when the intrusion was first detected.

The hacking collective ShinyHunters claimed responsibility for the breach, alleging that Figure refused to pay a ransom demand. The group reportedly published around 2.5GB of stolen data on its dark-web leak site. The incident highlights the continued vulnerability of fintech and crypto-adjacent firms to human-targeted cyberattacks, even as technical security defenses improve.