The publicly traded blockchain lending company Figure confirms a customer data breach incident. Figure stated that an employee was targeted by a social engineering attack, and the attacker downloaded some files through their account. The hacker group ShinyHunters claims to have stolen and published approximately 2.5GB of data. The leaked information may include customer names, addresses, birth dates, and phone numbers. Figure has blocked the relevant access and hired an forensic investigation agency to investigate, while offering free credit monitoring services to affected users. The attack may be related to companies relying on Okta single sign-on. (Decrypt)