Heights Finance Cloud Breach Exposes Millions
Coverage from Emery Reddy, PR Newswire, and others

Heights Finance disclosed that an unauthorized actor accessed a third-party cloud platform on May 7, 2026, potentially exposing sensitive information belonging to more than 1.
2 million current, former, and prospective customers. The data may include Social Security numbers, bank and routing details, government identification numbers, birth dates, contact information, and customer or loan-related records. Heights Finance says its core loan systems and other networks were not affected, while the company has secured the platform, notified law enforcement, and offered two years of credit monitoring and identity protection.
The core breach narrative and reported scale are unchanged. The update adds specificity about affected populations and identifies a law firm evaluating potential litigation.
The incident’s apparent scale has increased substantially, with Texas filings identifying 734,828 affected residents and nationwide notifications covering more than 1.2 million people. The company has also reported securing the platform and notifying federal law enforcement, while the attacker and cloud provider remain unidentified.
