Heights Finance Customer Data Hacked
Personal and financial data of 1.2 million people leaked.
1Scale of the Data Breach
Heights Finance disclosed that personal and financial data of over 1.2 million customers were leaked. The breach occurred due to the hacking of a third-party cloud platform used by the company. The incident was detected on May 7, 2026, and immediate action was taken. The data breach did not affect Heights Finance's loan management systems and was limited to the cloud platform.
2Compromised Information
The leaked data includes contact details, financial and bank account information, government IDs, and dates of birth. Affected individuals are not only current customers but also loan applicants, product inquiries, and former borrowers. Heights Finance is offering 24 months of free credit monitoring and identity protection services to those impacted.
3Company's Response
Upon detecting the incident, Heights Finance launched an investigation with external cybersecurity experts and notified federal law enforcement. The company confirmed that the cloud platform has been secured and there is no ongoing security threat. Operations were unaffected and continue securely, according to the company.
4Dark Web Monitoring
Heights Finance stated there is no evidence that the stolen data has been published on the dark web. No threat actor has claimed responsibility, and no known ransomware or extortion group is linked to the breach so far. The company warned customers about potential fraud attempts.
5About Heights Finance
Heights Finance is a U.S. financial company providing personal loans and related services, primarily to customers with limited access to traditional bank credit. Part of Heights Finance Holdings Co., the company serves clients with low credit scores. This breach could damage its reputation and customer trust.
6Other Breaches in the Industry
The financial sector has become a prime target for increasing cyberattacks in recent years. Similar data breaches have occurred at other financial institutions. Such incidents have raised awareness across the industry about protecting customer data and enhancing cybersecurity measures. Heights Finance is expected to learn from this event.
7Steps for Affected Customers
Impacted customers are advised to monitor their accounts regularly and report suspicious activities to Heights Finance immediately. Regularly checking credit reports and taking additional measures against identity theft are also crucial. Utilizing the free credit monitoring service offered by Heights Finance can enhance security.
8Importance of Cybersecurity
This incident underscores the critical importance of cybersecurity in the financial sector. Companies must rigorously audit the security of third-party platforms and use the latest technologies to protect customer data. Heights Finance is expected to strengthen its security measures following this breach.
Original article: Security Affairs — Heights Finance Müşteri Verileri Hacklendi