Hackers accessed customer data after compromising an employee account. The portion of the exposed files included details like names, home addresses, dates of birth, and phone numbers.

The group tied the breach to a wider campaign targeting Okta single sign-on users and published about 2.5GB of stolen data after Figure allegedly refused to pay a ransom.