Overview
First disclosed on February 13, 2026, when the company confirmed the breach to TechCrunch, reportedly saying an employee had been socially engineered. The notice says names, addresses and bank account and routing numbers were obtained, but not SSNs. Customers of partner New American Funding were notified for the same incident with the CA and WA AGs (the Figure WA filing lists 26,128 Washington residents). Attacker claims and leaked data were not used as evidence. No total is given.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.
Sources
- California AG data breach report: New American Funding, LLC (New American Funding, posted 02/27/2026)California Department of Justice, Office of the Attorney General · 2026-11-09
- Sample consumer notice filed with California AG (Figure Technology Solutions, Inc. on behalf of Figure Lending LLC, Figure Markets Credit LLC, and Figure Payments Corporation.)California Department of Justice, Office of the Attorney General · 2026-11-09
- Fintech lending giant Figure confirms data breach (TechCrunch, 2026-02-13)TechCrunch · 2026-11-09
- California AG data breach report: Figure Technology Solutions, Inc. on behalf of Figure Lending LLC, Figure Markets Credit LLC, and Figure Payments Corporation.California Department of Justice, Office of the Attorney General · 2026-11-09
- Washington AG: Figure Technology Solutions noticeWashington State Office of the Attorney General · 2026-11-09
- Sample consumer notice filed with California AG (New American Funding, LLC, New American Funding, posted 02/27/2026)California Department of Justice, Office of the Attorney General · 2026-11-09