02-15-2026, 12:03 AM
Description
On February 10, 2026, the American financial and blockchain technology company, Figure (figure.com) suffered a data breach caused by the @ShinyHunters group during their Okta SSO spear-phishing campaign. The breach resulted in the compromise of ~30,192 records. After Figure refused to pay the ransom, the group released the stolen data on February 13, 2026. The dataset contains the original user data (minus duplicated files) that was stolen and is 1.7 GB in size when decompressed (1.36 GB compressed). It includes ~11,898 unique email addresses and an estimated total of ~30,192 records across 304 files and 5 folders.
The compromised data includes full names, email addresses, phone numbers, physical addresses, dates of birth, HubSpot CRM dumps, KYC information, applicant information, employee data, stakeholder data, and much more.
File Extensions:
Samples:
Download
On February 10, 2026, the American financial and blockchain technology company, Figure (figure.com) suffered a data breach caused by the @ShinyHunters group during their Okta SSO spear-phishing campaign. The breach resulted in the compromise of ~30,192 records. After Figure refused to pay the ransom, the group released the stolen data on February 13, 2026. The dataset contains the original user data (minus duplicated files) that was stolen and is 1.7 GB in size when decompressed (1.36 GB compressed). It includes ~11,898 unique email addresses and an estimated total of ~30,192 records across 304 files and 5 folders.
The compromised data includes full names, email addresses, phone numbers, physical addresses, dates of birth, HubSpot CRM dumps, KYC information, applicant information, employee data, stakeholder data, and much more.
File Extensions:
Code:
Found 304 files:
.pdf 215 files: 0.4 Gb
.csv 25 files: 12.0 Mb
.docx 10 files: 4.1 Mb
.json 4 files: 0.1 Gb
.doc 2 files: 0.2 Mb
.pptx 1 files: 8.1 Mb
.txt 1 files: 0.6 Kb
.zip 22 files: 0.8 Gb
.png 1 files: 12.7 Kb
.xlsx 17 files: 5.4 Mb
.7z 5 files: 0.5 GbSamples:
Code:
==> applications-last90-10k.json <==
{
"identityUuid": "96911d18-418c-4cbe-8619-375f13b8fa19",
"applicationUuid": "570425db-a4d3-41c4-a2cb-a9c7989bbf89",
"loanNumber": "1-26028-6319",
"firstName": "Terence",
"middleName": null,
"lastName": "Wynne",
"email": "twynne00@yahoo.com",
"phoneNumber": "7578148722",
"dob": "1985-12-12",
"street1": "15 RICHLAND DR",
"street2": "",
"city": "NEWPORT NEWS",
"state": "VA",
"zip": "23608",
"status": "DECLINED",
"createdDate": "2026-01-28T23:04:51.405249Z",
"appType": "HELOC",
"organization": "WEST_CAPITAL_LENDING_INC",
"data": {
"heloc": {
"offers": [],
"inquiry": {
"isInquiry": true,
"inquiryData": {
"inquiryStatusCode": "INQUIRY_STARTED"
},
"inquiryAppUuid": {
"value": "570425db-a4d3-41c4-a2cb-a9c7989bbf89"
},
"inquiryTimestamp": "1970-01-01T00:00:00Z"
},
"referrerUuid": "128c804b-a352-48de-99c1-c080bf6211b1",
"canGenerateMismo": false
},
"common": {
"dob": "1985-12-12",
"zip": "23608",
"city": "NEWPORT NEWS",
"email": "twynne00@yahoo.com",
"state": "VA",
"status": "DECLINED",
"appType": "HELOC",
"street1": "15 RICHLAND DR",
"keyDates": {
"declinedAt": "2026-01-28T23:04:52.784729Z",
"cancelledAt": "2026-01-28T23:04:52.888961212Z",
"expirationDate": "2026-02-11T23:59:59Z",
"inquiryStartedAt": "2026-01-28T23:04:51.289840367Z"
},
"lastName": "Wynne",
"firstName": "Terence",
"isInquiry": true,
"loanNumber": "1-26028-6319",
"auditFields": {
"createdBy": "app.heloc",
"updatedBy": "uw.decision",
"createdDate": "2026-01-28T23:04:51.405248954Z",
"updatedDate": "2026-01-28T23:04:52.784729Z"
},
"coBorrowers": [],
"phoneNumber": "7578148722",
"identityUuid": {
"value": "96911d18-418c-4cbe-8619-375f13b8fa19"
},
"organization": "WEST_CAPITAL_LENDING_INC",
"overallState": "FINAL",
"utmParameters": {},
"declineReasons": ["CREDITSCORE"],
"applicationUuid": {
"value": "570425db-a4d3-41c4-a2cb-a9c7989bbf89"
},
"additionalSigners": [],
"fulfillmentOrganizations": "FIGURE"
}
},
"esCreated": "2026-01-28T23:04:51.390145Z",
"fulfillmentOrganizations": ["FIGURE"],
"isInquiry": true,
"fullName": "Terence Wynne",
"additionalSigners": [],
"coBorrowers": [],
"isHelocWithNoName": false,
"uuid": "570425db-a4d3-41c4-a2cb-a9c7989bbf89"
}, {
"identityUuid": "368497da-ee11-497b-95d6-549a5f1021d4",
"applicationUuid": "db930025-53a1-4254-98df-0806d1c09a0a",
"loanNumber": "1-26028-6318",
"firstName": "Roger",
"middleName": null,
"lastName": "Edwards",
"email": "marleyaperry@gmail.com",
"phoneNumber": "5133062677",
"dob": "1975-03-10",
"street1": "4205 GLENWAY AVE",
"street2": "F1",
"city": "CINCINNATI",
"state": "OH",
"zip": "45205",
"status": "WAITING_FOR_AVM_DATA",
"createdDate": "2026-01-28T23:04:50.961064Z",
"appType": "HELOC",
"organization": "WEST_CAPITAL_LENDING_INC",
"data": {
"heloc": {
"offers": [],
"inquiry": {
"isInquiry": true,
"inquiryData": {
"inquiryStatusCode": "INQUIRY_STARTED"
},
"inquiryAppUuid": {
"value": "db930025-53a1-4254-98df-0806d1c09a0a"
},
"inquiryTimestamp": "1970-01-01T00:00:00Z"
},
"referrerUuid": "917b4936-f226-43b2-835f-59c480b19886",
"canGenerateMismo": false
},
"common": {
"dob": "1975-03-10",
"zip": "45205",
"city": "CINCINNATI",
"email": "marleyaperry@gmail.com",
"state": "OH",
"status": "WAITING_FOR_AVM_DATA",
"appType": "HELOC",
"street1": "4205 GLENWAY AVE",
"street2": "F1",
"keyDates": {
"expirationDate": "2026-02-11T23:59:59Z",
"inquiryStartedAt": "2026-01-28T23:04:50.849675656Z"
},
"lastName": "Edwards",
"firstName": "Roger",
"isInquiry": true,
"loanNumber": "1-26028-6318",
"auditFields": {
"createdBy": "app.heloc",
"updatedBy": "ole.data.proto.external.core.response.heloc.r1",
"createdDate": "2026-01-28T23:04:50.961064157Z",
"updatedDate": "2026-01-28T23:04:54.346466809Z"
},
"coBorrowers": [],
"phoneNumber": "5133062677",
"identityUuid": {
"value": "368497da-ee11-497b-95d6-549a5f1021d4"
},
"organization": "WEST_CAPITAL_LENDING_INC",
"overallState": "VERIFY_LIENS",
"utmParameters": {},
"declineReasons": [],
"applicationUuid": {
"value": "db930025-53a1-4254-98df-0806d1c09a0a"
},
"additionalSigners": [],
"fulfillmentOrganizations": "FIGURE"
}
},
"esCreated": "2026-01-28T23:04:50.941256Z",
"fulfillmentOrganizations": ["FIGURE"],
"isInquiry": true,
"fullName": "Roger Edwards",
"additionalSigners": [],
"coBorrowers": [],
"isHelocWithNoName": false,
"uuid": "db930025-53a1-4254-98df-0806d1c09a0a"
}
==> 2025-FL2_order_id-10638402_034153 (1).csv <==
TRACKING_NUM,LOAN_NUM,PROP_ID,VENDOR,BORROWER,ADDRESS,CITY,STATE,ZIP,PROP_TYPE,OCCUPANCY,ZONING_TYPE,CURRENT_USE,PROJECTED_USE,PROP_CONDITION,PROP_CONDITION_DESC,SIG_REPAIRS_NEEDED,SIG_REPAIRS_COMMENTS,ZONING_VIOLATIONS,ZONING_VIOLATION_COMMENTS,PROP_CONFORMITY,PROP_CONFORMITY_COMMENTS,NEIGHBORHOOD_CONDITION,NEIGHBORHOOD_CONDITION_COMMENTS,NEGATIVE_EXTERNALITIES,NEGATIVE_EXTERNG ,LANDSCAPE,POOL/SPA,DECK/PATIO,DRIVEWAY,OTHER ,ESTIMATED_REPAIR_COSTS,DATE_COMPLETED,DATE_ORDERED,BROKER_NAME,BROKER_COMPANY,BROKER_LICENSE_NO,PDF
"2025-FL2","1-25175-3161","37947617","ClearCapital.com","Billy Krukowski","265 DUNHAMTOWN PALMER RD","BRIMFIELD",MA,01010,"SFR",Occupied,"Residential","Residential","Residential","Average","The subject home looks to be in average condition for the area","No","None seen at time of inspection","No","","Yes","The subject home fits in well in the area","Average","Most homes in the oomey Lovett","9074890","https://secure.clearcapital.com/user_data/customer/pdf_archive/65FBA9E8-0399-31EB-5F93A4B262AF7C90/1-25175-3161.pdf"
"2025-FL2","1-25225-4678","37947618","ClearCapital.com","Robert Moore","101 WINCHESTER RD","NORTHFIELD",MA,01360,"SFR",Occupied,"RES.","Single Family Residential","Single Family Residential","Average","Average/Good Overall Condition.","No","None Noted / Subject Property appears to have recent improvements.","No","None Noted.","No","None Noted.","Average","Average Overall Conditomer/pdf_archive/65FBA9E8-0399-31EB-5F93A4B262AF7C90/1-25225-4678.pdf"
"2025-FL2","1-25210-1472","37947619","ClearCapital.com","Elizabeth Malia Mroz","47 WILL DR # 108","CANTON",MA,02021,"Condo",Occupied,"Residential","Condo","Condo","Average","The subject is a condo in condominium complex in average condition. The yard is maintained and the exterior appears average.","No","","No","","Yes","","Average","","No","","No","",$0.00,$0.00,$0.00,$0.00,$0AF7C90/1-25210-1472.pdf"
"2025-FL2","1-25229-1097","37947620","ClearCapital.com","Luis Arevalo","1 FRANKLIN AVE","REVERE",MA,02151,"Multifamily",Occupied,"Residential","Residential","Residential","Average","2 family steps from Route 1A Each unit has 3 bedrooms with large rooms Andplenty of closet space. Finished basement. Central air and central heat. Open plan concept for Living room dinning room and 00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0,11/9/2025 7:59AM,11/7/2025,"Jensen Jeune","Remmes & Co. Real Estate","9579388","https://secure.clearcapital.com/user_data/customer/pdf_archive/65FBA9E8-0399-31EB-5F93A4B262AF7C90/1-25229-1097.pdf"
==> 2025-FL2_order_id-10638402_034153.csv <==
TRACKING_NUM,LOAN_NUM,PROP_ID,VENDOR,BORROWER,ADDRESS,CITY,STATE,ZIP,PROP_TYPE,OCCUPANCY,ZONING_TYPE,CURRENT_USE,PROJECTED_USE,PROP_CONDITION,PROP_CONDITION_DESC,SIG_REPAIRS_NEEDED,SIG_REPAIRS_COMMENTS,ZONING_VIOLATIONS,ZONING_VIOLATION_COMMENTS,PROP_CONFORMITY,PROP_CONFORMITY_COMMENTS,NEIGHBORHOOD_CONDITION,NEIGHBORHOOD_CONDITION_COMMENTS,NEGATIVE_EXTERNALITIES,NEGATIVE_EXTERNG ,LANDSCAPE,POOL/SPA,DECK/PATIO,DRIVEWAY,OTHER ,ESTIMATED_REPAIR_COSTS,DATE_COMPLETED,DATE_ORDERED,BROKER_NAME,BROKER_COMPANY,BROKER_LICENSE_NO,PDF
"2025-FL2","1-25175-3161","37947617","ClearCapital.com","Billy Krukowski","265 DUNHAMTOWN PALMER RD","BRIMFIELD",MA,01010,"SFR",Occupied,"Residential","Residential","Residential","Average","The subject home looks to be in average condition for the area","No","None seen at time of inspection","No","","Yes","The subject home fits in well in the area","Average","Most homes in the oomey Lovett","9074890","https://secure.clearcapital.com/user_data/customer/pdf_archive/65FBA9E8-0399-31EB-5F93A4B262AF7C90/1-25175-3161.pdf"
"2025-FL2","1-25225-4678","37947618","ClearCapital.com","Robert Moore","101 WINCHESTER RD","NORTHFIELD",MA,01360,"SFR",Occupied,"RES.","Single Family Residential","Single Family Residential","Average","Average/Good Overall Condition.","No","None Noted / Subject Property appears to have recent improvements.","No","None Noted.","No","None Noted.","Average","Average Overall Conditomer/pdf_archive/65FBA9E8-0399-31EB-5F93A4B262AF7C90/1-25225-4678.pdf"
"2025-FL2","1-25210-1472","37947619","ClearCapital.com","Elizabeth Malia Mroz","47 WILL DR # 108","CANTON",MA,02021,"Condo",Occupied,"Residential","Condo","Condo","Average","The subject is a condo in condominium complex in average condition. The yard is maintained and the exterior appears average.","No","","No","","Yes","","Average","","No","","No","",$0.00,$0.00,$0.00,$0.00,$0AF7C90/1-25210-1472.pdf"
"2025-FL2","1-25229-1097","37947620","ClearCapital.com","Luis Arevalo","1 FRANKLIN AVE","REVERE",MA,02151,"Multifamily",Occupied,"Residential","Residential","Residential","Average","2 family steps from Route 1A Each unit has 3 bedrooms with large rooms Andplenty of closet space. Finished basement. Central air and central heat. Open plan concept for Living room dinning room and 00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0.00,$0,11/9/2025 7:59AM,11/7/2025,"Jensen Jeune","Remmes & Co. Real Estate","9579388","https://secure.clearcapital.com/user_data/customer/pdf_archive/65FBA9E8-0399-31EB-5F93A4B262AF7C90/1-25229-1097.pdf"
==> 4-4 Recordings linked to session timestamps by userid.csv <==
user_id,event_time,event_type,app_amount,session_start_at
-5.07789E+18,2024-04-04 07:45:11 UTC,Recording,52495,
6.58544E+18,2024-04-04 07:36:31 UTC,Recording,32721.98,2024-03-26 20:29:31.252 UTC
6.58544E+18,2024-04-04 07:36:31 UTC,Recording,32721.98,2024-03-30 18:16:10.269 UTC
6.58544E+18,2024-04-04 07:36:31 UTC,Recording,32721.98,2024-03-26 22:39:13.067 UTC
==> AHT Report_20260128T143717.CSV <==
Date,Interval 60 Minutes,Agent Name,Supervisor Name,Campaign Name,Campaign ID,Skill Name,Active Team,Forced Logout By Agent Name,Forced Logout By Agent ID,Forced Logout Date,Forced Logout Time,ACD Time,ACW Time,Active Talk Time,Avg ACW Time,Avg Active Talk Time,Avg Handle Time,Avg Hold Time,ACD Contacts,Abandons (Outbound),Outbound Handled,Outbound Unavailable,Agent Abandons,Re
2026/01/27,00:00-01:00,"Baskar, Prakash",,,,,True,,,,,,,,,,,,,,,,,,,,,,,,,,,,,3600,,,,,
2026/01/27,00:00-01:00,"Irusagoudar, Santhosh",,,,,True,,,,,,,,,,,,,,,,,,,,,,,,,,208.18,,,3391.82,,,,,
2026/01/27,00:00-01:00,"Nethaji, Karthikeyan",,,,,True,,,,,,,,,,,,,,,,,,,,,,,,,,,,,1154.12,,,,,
==> AHT Report_20260128T143801.CSV <==
Date,Interval 60 Minutes,Agent Name,Supervisor Name,Campaign Name,Campaign ID,Skill Name,Active Team,Forced Logout By Agent Name,Forced Logout By Agent ID,Forced Logout Date,Forced Logout Time,ACD Time,ACW Time,Active Talk Time,Avg ACW Time,Avg Active Talk Time,Avg Handle Time,Avg Hold Time,ACD Contacts,Abandons (Outbound),Outbound Handled,Outbound Unavailable,Agent Abandons,Re
2026/01/27,00:00-01:00,"Baskar, Prakash",,,,,True,,,,,,,,,,,,,,,,,,,,,,,,,,,,,3600,,,,,
2026/01/27,00:00-01:00,"Irusagoudar, Santhosh",,,,,True,,,,,,,,,,,,,,,,,,,,,,,,,,208.18,,,3391.82,,,,,
2026/01/27,00:00-01:00,"Nethaji, Karthikeyan",,,,,True,,,,,,,,,,,,,,,,,,,,,,,,,,,,,1154.12,,,,,
==> Completed Contacts (1).CSV <==
Campaign Name,Direction,Media Type Name,Skill Name,ANI/From,DNIS/To,Master Contact ID,Contact Agent Name,Contact Start Date Time,Contact End Date Time,Abandons,Abandon Time,ACW Time,Agent Time,Callback Time,Held,Holds,Inqueue Time,Inbound,Outbound,Refused,Short Abandons,Takeovers,Postqueue Time,Prequeue Time,Refused Time,Release Time,Routing Time,Service Level,Tag Count,Contact
,Inbound,,,4044442050,8335970913,693509269849,,,,,,,,,,,,,,,,,,,4189.63,,,,,,,,,,,,,,,,
,Inbound,,,8015006669,8337141309,693508771250,,,,,,,,,,,,,,,,,,,5.21,,,,,,,,,,,,,,,,
Collections,Inbound,Phone Call,Collections - Inbound Voice,2014591920,8884260685,693508505160,"Gratic, Jakiela",2026/01/27 17:19:45,2026/01/27 17:31:21,,,7.7,449.24,,,,205.54,1,,,,,0.26,,,0.01,0.01,,,647.33,,,,,,,,,,,
==> Completed Contacts.CSV <==
Campaign Name,Direction,Media Type Name,Skill Name,ANI/From,DNIS/To,Master Contact ID,Contact Agent Name,Contact Start Date Time,Contact End Date Time,Abandons,Abandon Time,ACW Time,Agent Time,Callback Time,Held,Holds,Inqueue Time,Inbound,Outbound,Refused,Short Abandons,Takeovers,Postqueue Time,Prequeue Time,Refused Time,Release Time,Routing Time,Service Level,Tag Count,Contact
,Inbound,,,4044442050,8335970913,693509269849,,,,,,,,,,,,,,,,,,,4189.63,,,,,,,,,,,,,,,,
,Inbound,,,8015006669,8337141309,693508771250,,,,,,,,,,,,,,,,,,,5.21,,,,,,,,,,,,,,,,
Collections,Inbound,Phone Call,Collections - Inbound Voice,2014591920,8884260685,693508505160,"Gratic, Jakiela",2026/01/27 17:19:45,2026/01/27 17:31:21,,,7.7,449.24,,,,205.54,1,,,,,0.26,,,0.01,0.01,,,647.33,,,,,,,,,,Download
This account is currently banned.
Ban Length: Permanent
Ban Reason: Multi @fear. https://spear.cx/Forum-Ban-Appeals if you feel this is incorrect.
Ban Length: Permanent
Ban Reason: Multi @fear. https://spear.cx/Forum-Ban-Appeals if you feel this is incorrect.