A data breach at the blockchain-based lending company Figure affected close to a million customers, according to a security researcher. Figure confirmed the breach last week, stating hackers accessed a limited number of files from its systems. The company did not provide specifics on the type of data stolen or the number of customers impacted.
On Wednesday, security researcher Troy Hunt analyzed the data allegedly taken from Figure. His findings revealed the data contained 967,200 unique customer email addresses. The stolen information also included customer names, dates of birth, physical addresses, and phone numbers.
Figure did not respond to a request for comment regarding whether it disputes Hunt’s findings. The cybercrime group ShinyHunters claimed responsibility for the attack last week. The group published 2.5 gigabytes of data allegedly stolen from Figure on its leak website, a platform where hackers shame victims and publish stolen data if extortion demands are not met.