Heights Finance Data Breach Affects 700,000 Customers
Heights Finance data breach impacts over 700,000 customers
Overview of the Breach
A cybersecurity incident at Heights Finance disclosed in 2026 exposed sensitive information for more than 730,000 individuals across multiple U.S. states. The breach involved unauthorized access to a third-party cloud storage platform utilized by the organization, according to reports. The compromise occurred on May 7, 2026, and affected residents of Texas, Alabama, Tennessee, Georgia, and South Carolina. The stolen data encompassed personal contact information, financial account details, and government-issued identifiers such as Social Security numbers.
Response and Measures Taken
The attack specifically targeted the third-party cloud infrastructure and did not compromise the company’s primary loan management systems. Heights Finance has initiated measures to assist affected parties, including providing credit monitoring and identity protection services via Epiq. The identity of the cloud service provider remains undisclosed, as does the affiliation of the threat actors responsible for the breach. No further details about the attack vector or methods used have been publicly released.
Additional Cybersecurity Incidents
Additional cybersecurity incidents reported in recent weeks include a data breach at SafePal impacting nearly 40,000 customers, a breach at Trezor linked to a shipping partner affecting over 13,000 users, and a RingCentral incident attributed to a social engineering campaign by the ShinyHunters group.
About Author
English