Social EngineeringFinancial ServicesTechnologyFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHighContained

Figure Technology Solutions, Inc.

bd_f28faa1bcf9c2e5e · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 28, 2026

Filed

Feb 23, 2026

To disclose

26 days

Affected

26,128state residents only

Linked

3 filings

Confidence

69%

Full breach record for Figure Technology Solutions, Inc. →

Figure Technology Solutions, Inc. reported a security incident discovered on January 28, 2026, where an employee was socially engineered, granting an unauthorized actor access to accounts. The incident affected 26,128 Washington residents, exposing names, addresses, SSNs, DOBs, and loan account numbers. Figure engaged forensic investigators and law enforcement, contained the breach, and is offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d26 days discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 26 days

Jan 28, 2026

Begins

Jan 28, 2026

Discovered

Feb 23, 2026

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteshinyhuntersbd_feda7b8980079d022026-02-13 · +10dCandidate

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_8429e2c9786d75b22026-02-24 · +1dVerified by operator

Name: Figure Technology Solutions, Inc.
norm: figure technology
Domain: figure.com

Name: Figure Technology Solutions, Inc.
norm: figure technology
Domain: figure.com
Industry: Financial ServicesllmTechnologyllm

Discovered: Jan 28, 2026
Breach occurred: Jan 28, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 24, 2026
Affected individuals: 26,128state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberFinancial account numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Washington State Office of Attorney General
Initial access: phishing_link

During the incident: Activated its incident response process
Engaged Guidepoint Security LLC to investigate
Engaged Orrick, Herrington & Sutcliffe LLP as incident response counsel
Notified law enforcement
Changes made: Implemented enhanced security and monitoring controls
Offered two years of complimentary credit monitoring and identity restoration services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Washington State AGFeb 23 · first · this page

Indiana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA36775.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 23, 2026
Raw hash: d2358ef102ce70fea3f0991101e45180d767a0c0ca390287d143ab18bde8c2df

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityFigure Technology Solutions, Inc.

Victim entityFigure Technology Solutions, Inc.

Incidentdiscovered Jan 28, 2026

Stated responseActivated its incident response process

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com