HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIFINANCIALLowContained
Figure Lending Corp
bd_04d4edb44be7c365 · schema v1 · pii pii-v1
Full breach record for Figure Lending Corp →Figure Lending Corp (and subsidiaries Figure Lending LLC, Figure Markets Credit LLC, Figure Payments Corporation) discovered unauthorized activity on its systems. On January 28, 2026, personal information was obtained through unauthorized queries on company databases storing loan and loan inquiry data. SSNs were not affected for all recipients. The company engaged a cybersecurity firm, notified law enforcement, and is offering 24 months of TransUnion credit monitoring to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_983f209181acda62New Hampshire State AGfiled 2026-03-06(37d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-619492
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 28, 2026
- Raw hash
- 2b8aaf6419bf8dae986472248147d19971a3c99743fa3538fc451ad342f84ea3
Reporting entity
- Name
- NEW AMERICAN FUNDING, LLCnorm: new american funding
- Domain
- newamericanfunding.com
Victim entity
- Name
- Figure Lending Corpnorm: figure lending
- Industry
- Technology-driven lender; home equity lines of credit, refinancing, crypto-backed loans
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement and offered full cooperationNotification submitted to California Office of the Attorney General
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.