Fintech firm Figure disclosed data breach after employee phishing attack

Fintech firm Figure disclosed data breach after employee phishing attack

Figure confirmed a data breach after an employee fell for a social engineering attack that allowed hackers to steal a limited number of files. ShinyHunters claimed responsibility and released about 2.5GB of stolen data while Figure notifies affected individuals and offers free credit monitoring. #Figure #ShinyHunters

Keypoints

  • An employee was tricked in a social engineering attack, resulting in unauthorized access.
  • Hackers stole a limited number of files containing personal data such as names, addresses, birth dates, and phone numbers.
  • The cybercrime group ShinyHunters claimed responsibility and published roughly 2.5GB of stolen data.
  • Figure is notifying affected individuals and offering free credit monitoring to those who receive a breach notice.
  • Figure has not disclosed the number of impacted users or discovery date; reports suggest Okta single sign-on customers were targeted.

Read More: https://securityaffairs.com/187988/data-breach/fintech-firm-figure-disclosed-data-breach-after-employee-phishing-attack.html