Overview
- Figure says a staff member was socially engineered, enabling access to a limited number of files through the employee’s account.
- ShinyHunters claimed responsibility, said a ransom demand was rejected, and posted about 2.5 GB of alleged customer data on its leak site.
- Reporters who examined samples of the leak observed personal information including full names, home addresses, dates of birth, and phone numbers.
- The company reports it blocked the unauthorized access, engaged a forensic firm, and currently sees no evidence that customer funds or accounts were compromised.
- A ShinyHunters member described the incident as part of a broader campaign targeting organizations that use Okta single sign-on, with Harvard and the University of Pennsylvania cited as other alleged victims.