Figure Lending Corp

Figure Lending Corp (and subsidiaries Figure Lending LLC, Figure Markets Credit LLC, Figure Payments Corporation) discovered unauthorized activity on its systems. On January 28, 2026, personal information was obtained through unauthorized queries on company databases storing loan and loan inquiry data. SSNs were not affected for all recipients. The company engaged a cybersecurity firm, notified law enforcement, and is offering 24 months of TransUnion credit monitoring to affected individuals.

New American Funding, LLC reported a data security incident involving its third-party service provider, Figure Lending, LLC. On January 28, 2026, a Figure employee was targeted by a social engineering attack, allowing an unauthorized actor to download files containing personal information (names, SSNs, DOBs, loan data). 107 New Hampshire residents were notified on February 24, 2026. Figure offered 24 months of credit monitoring via TransUnion.

Affected (this filing): 107