The blockchain-based lending company Figure experienced a data breach impacting nearly a million customers, according to a security researcher.
Last week, Figure acknowledged a data breach that enabled hackers to steal “a limited number of files” from its systems. However, the company did not disclose what type of data was compromised or the number of affected customers.
On Wednesday, security researcher Troy Hunt, creator of the data breach notification site Have I Been Pwned, analyzed the data reportedly taken from Figure and identified 967,200 unique email addresses linked to Figure customers.
The breached data also included customer names, dates of birth, physical addresses, and phone numbers.
Figure did not reply to a comment request and has not stated whether it challenges Hunt’s discoveries.
The cybercrime group ShinyHunters informed TechCrunch last week that it was responsible for the cyberattack on Figure. The group released 2.5 gigabytes of data claimed to be stolen from Figure on its leak site, where they shame victims and publish stolen data if their extortion efforts fail.