Heights Finance breach affects 1.2 million people

Heights Finance Holdings Co. is notifying more than 1.2 million individuals that their personal and financial data was compromised in a data breach discovered earlier this year. The consumer finance company, which provides personal loans to customers with limited access to traditional credit, announced the breach in a public notice, stating that an unauthorized party gained access to a third-party cloud platform on May 7, 2026.

According to the company’s disclosure, the intrusion was confined to that specific cloud environment, which was used to store certain customer information. Heights Finance emphasized that the incident did not affect its loan management systems or any other internal networks. Upon discovering the unauthorized access, the company activated its incident response protocols, engaged external cybersecurity experts for an investigation, and reported the matter to federal law enforcement. The company has since confirmed that the compromised platform is secure and that there is no ongoing threat to its operations.

The breach potentially exposed a combination of highly sensitive data that could be used for identity theft and financial fraud. Compromised information...