Hackers exposed personal data from 967,200 Figure accounts in a social engineering attack, including names, addresses, emails and dates of birth.