Last Update: 09/22/2026 at 11:34 PM EST

Heights Finance Cloud Breach Exposes Millions

Coverage from Emery Reddy, PR Newswire, and others

Heights Finance Cloud Breach Exposes Millions topic image

Heights Finance disclosed that an unauthorized actor accessed a third-party cloud platform on May 7, 2026, potentially exposing sensitive information belonging to more than 1.

2 million current, former, and prospective customers. The data may include Social Security numbers, bank and routing details, government identification numbers, birth dates, contact information, and customer or loan-related records. Heights Finance says its core loan systems and other networks were not affected, while the company has secured the platform, notified law enforcement, and offered two years of credit monitoring and identity protection.

Looking Back
9 Day Timeline
Aug 11Aug 13Aug 14Aug 16Aug 17Aug 19
History
09/09/2026

The core breach narrative and reported scale are unchanged. The update adds specificity about affected populations and identifies a law firm evaluating potential litigation.

08/24/2026

The incident’s apparent scale has increased substantially, with Texas filings identifying 734,828 affected residents and nationwide notifications covering more than 1.2 million people. The company has also reported securing the platform and notifying federal law enforcement, while the attacker and cloud provider remain unidentified.

All Articles9 articles
Interesting9 articles · CI Score 45–59
Emery Reddy
Heights Finance Holdings Co. disclosed on August 11, 2026, that unauthorized access to a third-party cloud platform exposed sensitive customer information affecting at least 734,849 residents in Texas and Vermont.
8/17/2026 • Data Breaches & Exposure Events • General
PR Newswire
Heights Finance Holdings Co. discovered unauthorized access to a third-party cloud platform storing sensitive customer data in Greenville, South Carolina, on May 7, 2026.
8/12/2026 • Data Breaches & Exposure Events • General
Morningstar
Heights Finance Holdings Co. discovered unauthorized third-party cloud access on May 7, 2026, potentially exposing borrowers' financial and identifying information.
8/13/2026 • Data Breaches & Exposure Events • General
Claim Depot
Heights Finance reported on August 11, 2026, that unauthorized access to a third-party cloud platform potentially exposed customer financial and identity data, including information belonging to 21 Vermont residents.
8/11/2026 • Data Breaches & Exposure Events • General
SC Media
Heights Finance disclosed a May 7, 2026 third-party cloud breach affecting potentially more than 730,000 Texans and residents of Alabama, Tennessee, Georgia, and South Carolina.
8/19/2026 • Data Breaches & Exposure Events • General
Malwarebytes / Pieter Arntz
Heights Finance discovered unauthorized access on May 7 to a third-party cloud platform containing customer information across Alabama, Georgia, South Carolina, Tennessee, and Texas.
8/18/2026 • Data Breaches & Exposure Events • General
Security Affairs / Pierluigi Paganini
On May 7, 2026, Heights Finance Holdings discovered unauthorized access to a third-party cloud platform containing information associated with more than 1.2 million people.
8/18/2026 • Data Breaches & Exposure Events • General
SecurityWeek / Ionut Arghire
Heights Finance Holdings Co. notified more than 1.2 million people in the United States after hackers accessed customer information stored on a third-party cloud platform in early May.
8/18/2026 • Data Breaches & Exposure Events • General
The Record / Jonathan Greig
Heights Finance said a hacker accessed a third-party cloud platform on May 7, exposing sensitive personal and financial information belonging to 734,828 customers across the United States.
8/17/2026 • Data Breaches & Exposure Events • General