Heights Finance Breach Exposes Data on More Than 1.2 Million People
The exposure of sensitive identity and banking records raises elevated risk of identity theft and financial fraud for affected individuals.
Overview
- Heights Finance said it discovered unauthorized access to a third‑party cloud platform on May 7 and investigators believe the intruder may have viewed or copied stored records.
- State notices filed by the company list more than 1.2 million people affected, including 734,828 in Texas and 486,463 in South Carolina.
- Potentially exposed data includes names, contact details, dates of birth, Social Security numbers, driver’s license or state ID numbers, and bank account information.
- Heights says its loan management systems were not affected, the cloud platform has been secured, outside cybersecurity specialists and federal investigators are involved, and the company is offering 24 months of free credit monitoring and identity protection.
- No threat actor has been publicly identified and the company reports no signs so far that the stolen data has been posted or sold, but the combination of exposed fields increases the risk of targeted account takeover, phishing, and identity fraud for affected people.