Subscribe To Our Newsletter

This field is for validation purposes and should be left unchanged.
Class Action U Logo
Check Your Eligibility

Figure Technology Solutions Data Breach

Figure Technology Solutions, the company behind Figure Lending, experienced a data breach on January 28, 2026, exposing personal and loan-related information. If you were affected, you may be eligible to file a lawsuit or participate in mass arbitration. Contact Class Action U for a free consultation to explore your legal options.

Check Your Eligibility
Figure Technology Solutions
Date of Breach: January 28, 2026
CAU logo

Who was affected:

Clients of Figure Technology Solutions

Impacted Data:

Full name

Social Security number

Mailing and email addresses

Phone numbers

Dates of birth

Loan account numbers

Other loan-related details

Check Your Eligibility

Figure Technology Solutions, the parent company of Figure Lending, has reported a data breach impacting a wide range of customer information. The breach exposed personal data such as names, Social Security numbers, mailing and email addresses, phone numbers, dates of birth, loan account numbers, and other loan-related details. According to an investigation, the breach occurred through unauthorized queries on the company’s databases containing sensitive loan information.

Figure Technology Solutions’ Data Breach Investigation

On January 28, 2026, Figure Technology Solutions detected unauthorized access within its systems. The company discovered that a cybercriminal group, ShinyHunters, was responsible for breaching its security. The hackers accessed Figure’s loan databases and gathered sensitive customer data. It is believed that the stolen data was then released on the dark web, with approximately 2.5 gigabytes of information reportedly posted by the group.

The breach affected a significant number of customers who used Figure Lending’s services, including online home equity lines of credit (HELOCs) and cryptocurrency-backed lending. The company also provides services to other lenders, offering both technology and administrative support. Following the incident, Figure took immediate steps to secure its systems and began an extensive investigation into the extent of the breach.

Notice letters were sent to individuals whose personal information was compromised in late February 2026. While Figure Technology Solutions has stated that it implemented additional security measures, the breach has raised serious concerns about the company’s ability to protect sensitive customer data and prevent future cyberattacks.

When Did This Breach Occur?

The breach occurred on January 28, 2026, when unauthorized queries were executed on the company’s databases, allowing hackers to access personal and loan-related information.

What Information Was Breached?

The data breach exposed a variety of personal and financial information, including:

  • Full name
  • Social Security number
  • Mailing and email addresses
  • Phone numbers
  • Dates of birth
  • Loan account numbers
  • Other loan-related details

This sensitive information was accessed and, according to reports, released on the dark web by the cybercriminal group ShinyHunters.

What You Can Do

If you received a notice from Figure Technology Solutions about the data breach or believe your information was compromised, here are steps you should take to protect yourself:

  • Monitor Your Credit Reports: Regularly check your credit reports for any signs of identity theft or fraud.
  • Enroll in Credit Monitoring Services: If you have been offered credit monitoring or identity protection services, take advantage of them to help detect suspicious activity.
  • Review Your Loan Statements: Keep an eye on your loan accounts for any unauthorized transactions or changes to your account details.
  • Place Fraud Alerts or Credit Freezes: Consider placing a fraud alert or a credit freeze on your credit files to prevent unauthorized access.
  • Report Fraud: If you notice any fraudulent activity on your accounts, contact your financial institution and relevant authorities immediately.

By staying vigilant and using the available resources, you can minimize the risk of identity theft and fraud following the breach.

File a Data Breach Lawsuit Against Figure Technology Solutions

If you were impacted by the Figure Technology Solutions data breach, you may be eligible to take legal action, potentially through mass arbitration. Mass arbitration is an alternative to traditional class-action litigation, and it allows affected individuals to seek compensation outside of court.

If you received a notice about this breach or suspect your information was exposed, it’s important to explore your legal options. Contact Class Action U for a free consultation. We’ll connect you with experienced attorneys who specialize in data breach lawsuits and can guide you through the process. There is no cost or obligation to speak with an attorney.

Don’t wait – if your personal data has been compromised, take action now to protect your rights and pursue compensation for any potential damages

VIEW PDF
Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Sterling Seacrest Pritchard Data Breach
Date of Breach: August 2025
Oklahoma Tax Commission Data Breach
Date of Breach: December 2025
Advantage Gold Data Breach
Date of Breach: September 5, 2025
Show More

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.