HackingFinancial ServicesTechnologyFinanceStolen CredentialsCustomer Data InvolvedFinancial accountIdentity (basic)Government IDMediumContained

Figure Lending Corp

bd_0e4a9ec64e5867df · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 3, 2026

To disclose

—

Affected

638state residents only

Linked

8 filings

Confidence

66%

Full breach record for Figure Lending Corp →

Figure Lending Corp disclosed a security incident where unauthorized activity on its systems led to the obtaining of personal information, including Social Security Numbers, via queries on company databases storing loan and loan inquiry data on January 28, 2026. The company contained the activity, engaged a cybersecurity firm, and notified law enforcement. Affected individuals are offered two years of credit monitoring and identity restoration services through TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 28, 2026

Begins

Mar 3, 2026

Filed

This filing is one of 8 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

New Hampshire State AGbd_983f209181acda622026-03-06 · +3dVerified
California State AGbd_04d4edb44be7c3652026-02-27 · +4dCandidate
Washington State AGbd_e5eff25ef061db852026-02-27 · +4dVerified
Nebraska State AGbd_e98dfc28a35687cb2026-02-27 · +4dVerified

Show 3 more filings ↓up to 8d gap

Nebraska State AGbd_7b52ff5445d950f12026-02-24 · +7dVerified
Massachusetts State AGbd_16047971769a6e512026-02-23 · +8dVerified
California State AGbd_296cbbf7363298af2026-02-23 · +8dVerified

Name: Figure Lending Corp
norm: figure lending

Name: Figure Lending Corp
norm: figure lending
Industry: Financial ServicesllmTechnologyllm

Discovered: —
Breach occurred: Jan 28, 2026
Materiality determined: —
Notification sent: —
Affected individuals: 638state-resident count only
Data types: Financial accountIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Reported the incident to law enforcement
Initial access: valid_credentials

During the incident: Acted quickly to stop the activity and enhance our security measures
Began working with a leading cybersecurity firm to investigate what happened
Reported the incident to law enforcement and offered our full cooperation
Offering two years of complimentary credit monitoring and identity restoration services through our third-party vendor, TransUnion
Implemented enhanced security and monitoring controls
Changes made: Implemented enhanced security and monitoring controls
Remain committed to ongoing information security reviews to strengthen our security and privacy programs and controls
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 5 states

View merged incident ↗

Massachusetts State AGFeb 23 · first

California State AGFeb 23 · first

Nebraska State AG+1d

California State AG+4d

Washington State AG+4d

Nebraska State AG+4d

Massachusetts State AG+8d · this page

New Hampshire State AG+11d

Pattern: first filing Feb 23 (MA), last Mar 6 (NH) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-314-new-american-funding-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 3, 2026
Raw hash: 289697e28d7effc4d018ef5edd9e02daace2b451aad86fe32f8880f6eb1af96a

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityFigure Lending Corp

Victim entityFigure Lending Corp

IncidentUnauthorized Access

Stated responseActed quickly to stop the activity and enhance our security measures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov