Fintech Data Breach Exposes Customer Information
February 18, 2026
A significant data breach at the fintech company Figure has compromised the personal information of nearly one million customers. The breach, confirmed by Figure, involved the unauthorized access and theft of sensitive data, including names, email addresses, dates of birth, physical addresses, and phone numbers. Security researcher Troy Hunt analyzed the leaked data and reported that it contained 967,200 unique email addresses linked to Figure customers. The cybercrime group ShinyHunters claimed responsibility for the attack, publishing 2.5 gigabytes of the stolen data on their leak website. This incident raises concerns about the security measures in place at fintech companies and the potential risks associated with the increasing reliance on digital financial services. Customers whose data has been compromised face risks such as identity theft and fraud, highlighting the urgent need for stronger cybersecurity protocols in the fintech industry. The implications of such breaches extend beyond individual customers, affecting trust in digital financial systems and potentially leading to regulatory scrutiny of companies like Figure. As the use of AI and digital platforms grows, understanding the vulnerabilities that accompany these technologies is crucial for safeguarding personal information and maintaining public confidence in financial institutions.