Heights Finance data breach exposes personal and financial data of more than 1.2 million people
Consumer lender Heights Finance is notifying more than 1.2 million people that hackers accessed a third-party cloud platform storing customer data, exposing Social Security numbers, bank details and IDs, per SecurityWeek and Security Affairs.
Heights Finance Holdings Co. is notifying more than 1.2 million people that hackers accessed a third-party cloud-based platform used to store customer data. Heights says the breach, discovered on May 7, 2026, was limited to that outside platform and did not affect its own loan management systems or internal networks. Stolen information includes names, addresses, phone numbers, Social Security numbers, government ID and driver's license numbers, bank account details and dates of birth. State notification filings show at least 734,828 affected individuals in Texas and 486,463 in South Carolina, with smaller numbers in New Hampshire and Vermont. Heights is offering affected individuals 24 months of free credit monitoring and identity protection. No threat actor has claimed responsibility, and the company says its dark web monitoring has found no evidence the stolen data has been published. Sources: SecurityWeek, Security Affairs.