Heights Finance Holdings Promotes Caution Following Data Security Breach Incident
Heights Finance Holdings Promotes Caution Following Data Security Breach Incident
Heights Finance Holdings Co., a prominent consumer credit lender based in Greenville, South Carolina, is advising individuals to take necessary protective measures following a recent security incident. The company reported that on May 7, 2026, an unauthorized party accessed a cloud-based platform managed by a third-party provider, which contained specific customer data.
This breach, although concerning, was confined solely to the cloud platform and did not impact Heights' loan management systems or any other internal computer networks. Upon discovering the intrusion, Heights promptly activated its incident response protocols, engaged external cybersecurity experts for a thorough investigation, and notified federal law enforcement agencies of the breach.
Following the incident, Heights has ensured that the cloud-based platform is now secure and has confirmed there is no ongoing threat to its operations, which have continued without disruption. However, the investigation revealed that an unauthorized individual may have viewed or copied sensitive customer information from the platform. The specific data potentially exposed includes:
- - Contact Information: Names, addresses, phone numbers, or email addresses.
- - Financial Data: Details about customers’ accounts, including bank account information such as bank names, account numbers, and routing numbers.
- - Government IDs: Social Security numbers, tax ID numbers, driver's license numbers, or state ID numbers could also have been accessed.
- - Additional Information: Information like date of birth or other personal details shared during customer service interactions.
If you have previously obtained a loan from Heights or inquired about its loan products, it’s crucial to determine if your information may be involved in this data breach. This also applies to former borrowers of Curo Management and any associated brands.
Heights Finance emphasizes its commitment to maintaining the security and confidentiality of customer information. As a proactive response to the incident, the company has enlisted a third-party cybersecurity firm to monitor the dark web for any potentially compromised data. This hidden segment of the internet is notorious for illegal activity and data exchanges. To date, the cybersecurity expert has not detected any evidence suggesting that the information from this incident has surfaced on dark web platforms.
In recognition of the potential impact on its customers, Heights Finance is offering complimentary credit monitoring and identity protection services through Epiq, a trusted third-party provider. Customers who suspect their information might be compromised are highly encouraged to utilize these protective services. Detailed instructions can be found on the dedicated incident website at heightsfinance.com/ImportantInfo. The site will also feature updates related to the incident, so monitoring it frequently is advisable.
To address customer inquiries or concerns regarding this incident, Heights has established a dedicated call center. Customers can reach this center at 877-343-7785, from Monday to Friday, between 9:00 AM and 9:00 PM ET, for assistance.
Staying informed and taking precautionary measures during this period is essential for anyone who may be affected. The commitment of Heights Finance to protecting customer information remains strong, ensuring that necessary steps are taken to mitigate risks and enhance security going forward.
Topics Financial Services & Investing）
【About Using Articles】
You can freely use the title and article content by linking to the page where the article is posted.
※ Images cannot be used.
【About Links】
Links are free to use.