DisclosureLens
HackingIdentity (basic)Government IDFinancial accountMediumContained

Figure Lending Corp

bd_7b52ff5445d950f1 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jan 28, 2026

Filed

Feb 24, 2026

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

65%
Full breach record for Figure Lending Corp →

Figure Lending Corp (subsidiaries Figure Markets Credit LLC and Figure Payments Corporation) notified Nebraska residents of a January 28, 2026 data breach. Unauthorized queries accessed loan and inquiry databases containing names, SSNs, addresses, DOBs, and loan account numbers. No customer account funds were compromised. Figure engaged cybersecurity investigators, notified law enforcement, and provided two years of complimentary credit monitoring via TransUnion.

Incident timeline

Jan 28, 2026

Begins

Jan 28, 2026

Discovered

Feb 24, 2026

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 10d gap

Filing propagation · 8 filings · 5 states

View merged incident ↗
Massachusetts State AGFeb 23 · first
California State AGFeb 23 · first
Nebraska State AG+1d · this page
California State AG+4d
Washington State AG+4d
Nebraska State AG+4d
Massachusetts State AG+8d
New Hampshire State AG+11d

Pattern: first filing Feb 23 (MA), last Mar 6 (NH) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.