Data breach at fintech firm Figure affects nearly 1 million accounts