New American Funding Data Breach Notification

Melissa K. Ventrone T (312) 360-2506 F (312) 517-7572 Email:mventrone@ClarkHill.com Clark Hill 130 E. Randolph Street, Suite 3900 Chicago, Illinois 60601 T (312) 985-5900 F (312) 985-5999 February 26, 2025 Via Online Portal Office of the Attorney General 1125 Washington St SE Olympia, WA Dear Attorney General Brown, We represent New American Funding, LLC (“New American Funding”) with respect to a data security incident involving the potential exposure of certain personal information described in more detail below. New American Funding is committed to answering any questions you may have about the data security incident and its response. 1. Nature of security incident. On February 12, 2026, New American Funding was notified by a service provide, Figure Lending, LLC (“Figure”) that it had experienced a security incident that may have impacted New American Funding customer data. New American Funding’s systems and the data stored in those systems (including customer data) were not affected by the incident. Figure informed New American Funding that on January 28, 2026, a Figure employee was the target of a social engineering attack and allowed an unauthorized actor to download a limited number of files from a Figure account. Figure stated that there was no unauthorized access to customer accounts or funds. However, the accessed files may have contained personal information including names, addresses, Social Security numbers, dates of birth, phone numbers, email addresses, loan account numbers, and loan information. Figure offered to notify impacted individuals on behalf of New American Funding, which New American Funding subsequently authorized. Figure informed New American Funding on February 24, 2026, that letters were mailing that same day. 2. Number of residents affected. 699 Washington residents were notified of the incident. A notification letter was sent to affected individuals on February 24, 2026 (a copy of the form notification letters is attached as Exhibit A). 3. Steps taken in response to the incident.

New American Funding reviewed the information provided by Figure in response to this incident and confirmed that Figure has taken appropriate steps to prevent a similar incident in the future. Additionally, Figure notified affected individuals and offered 24 months of credit monitoring and identity protection services through TransUnion. 4. Contact information. New American Funding takes the security of the information in its control seriously and is committed to ensuring information within its control is appropriately protected. If you have any questions or need additional information, please do not hesitate to contact me at mventrone@clarkhill.com or (312) 360-2506. CLARK HILL Melissa K. Ventrone Member cc: Mariah Leffingwell – mleffingwell@clarkhill.com

U.S. I NDIVIDUAL N OTICE - DOB OVERVIEW: To inform individuals whose data was impacted, following completion of the investigation. [NAME ] Figure Lending Corp and its subsidiaries, Figure Lending LLC, Figure Markets Credit LLC and Figure included the origination and/or servicing of a loan you have with our business partner lenders. We have determined that your << insert data fields >> were or may have been obtained. Your Social Security Number was not affected. controls. Exhibit A

questions, please call the call center at PHONE # , from 8 a.m. to 8 p.m. ET Monday through Friday,

below: Equifax Experian Division Center m FTC.

696-5300. contact each of the credit bureaus directly to obtain such additional report(s).

U.S. I NDIVIDUAL N OTICE - SSN [NAME ] Figure Lending Corp and its subsidiaries, Figure Lending LLC, Figure Markets Credit LLC, and Figure included the origination and/or servicing of a loan you have with our business partner lenders We have determined that your << insert data fields >> were obtained. controls.

questions, please call the call center at PHONE #, from 8 a.m. to 8 p.m. ET Monday through Friday,

below: Equifax Experian Division Center m FTC.

696-5300. contact each of the credit bureaus directly to obtain such

U.S. I NDIVIDUAL N OTICE - DOB OVERVIEW: To inform individuals whose data was impacted, following completion of the investigation. [NAME ] Figure Lending Corp and its subsidiaries, Figure Lending LLC, Figure Markets Credit LLC and Figure included the origination and/or servicing of a loan you have with our business partner lenders. We have determined that your << insert data fields >> were or may have been obtained. Your Social Security Number was not affected. controls. Exhibit A

questions, please call the call center at PHONE # , from 8 a.m. to 8 p.m. ET Monday through Friday,

below: Equifax Experian Division Center m FTC.

696-5300. contact each of the credit bureaus directly to obtain such additional report(s).

U.S. I NDIVIDUAL N OTICE - SSN [NAME ] Figure Lending Corp and its subsidiaries, Figure Lending LLC, Figure Markets Credit LLC, and Figure included the origination and/or servicing of a loan you have with our business partner lenders We have determined that your << insert data fields >> were obtained. controls.

questions, please call the call center at PHONE #, from 8 a.m. to 8 p.m. ET Monday through Friday,

below: Equifax Experian Division Center m FTC.

696-5300. contact each of the credit bureaus directly to obtain such