Figure Finance Data Breach Exposes 970,759 SSN & Birthday Records

HEROIC analysts confirmed that Figure, a lending platform, was affected by a data breach on January 28, 2026, exposing 970,759 records. The exposed data included email addresses, first and last names, phone numbers, birthdays, and Social Security numbers. The only way to know for certain whether your own information is part of this exposure is to scan your email.

What Someone Could Do With This Combination

A Social Security number paired with a full name, birthday, phone number, and email address is close to everything a scammer needs to attempt identity theft. That combination can be used to try opening new credit accounts, filing fraudulent claims, or passing identity checks that rely on exactly this kind of personal detail.

The Specific Data Involved

• Email Address
• First Name
• Last Name
• Phone Number
• Birthday
• Social Security Numbers

The Real-World Impact

Because this exposure has been confirmed, the risk is concrete. Social Security numbers combined with a verified name and birthdate raise the risk of new accounts or credit being opened in your name, and a phone number tied to your real identity makes impersonation calls and texts considerably more convincing.

How Data Like This Typically Gets Out

HEROIC analysts confirmed that this data was taken from the company's own systems rather than collected one device at a time through malware. In practice, this usually means a customer database was accessed without authorization and the information later began circulating.

Could Your SSN Be Part of This Figure Exposure?

The fastest way to find out is to scan your email. If your information turns up, watch closely for calls, texts, or emails that use your real name and phone number while impersonating the company or a lender, and keep an eye on your credit reports for any activity you don't recognize. Check both your personal and work email addresses, since either one could be tied to an account in a dataset like this.