Heights Finance Data Breach Exposes Sensitive Information of 750,000 Customers

Heights Finance Holdings has issued a notification regarding a data breach that has compromised sensitive customer information. An unauthorized party accessed a third-party cloud platform that stored customer data, which may include personal, banking, and identity details. The company, which provides personal installment loans, reported to Texas regulators that around 734,828 individuals could be affected. However, this number may not represent the total nationwide since Heights Finance operates multiple loan companies across several states, including Alabama, Tennessee, Georgia, Texas, and South Carolina.

The breach notice indicates that not only Heights Finance customers may be impacted, but also individuals associated with certain current or former brands related to CURO Management, the company’s predecessor. The incident was discovered on May 7, when Heights Finance learned that an unauthorized party had gained access to the cloud-based platform. An investigation revealed that the intruder might have viewed or copied sensitive information.

The nature of the exposed records is particularly alarming, as they may include combinations of data that criminals can exploit for identity theft or financial fraud. Information such as Social Security numbers, dates of birth, addresses, and bank account details can facilitate serious risks, including identity fraud, financial fraud, and account takeover attempts. Additionally, personal circumstances shared by customers with support staff could make scams more convincing, especially for those who discussed financial difficulties or sensitive topics.

Customers who receive a notification letter from Heights Finance are advised to follow the instructions provided and consider enrolling in the protection services offered. Specific guidance can be found on the Heights Finance website. There is also uncertainty regarding whether individuals who do not receive a notice may still be affected by the breach. Those who believe they may be impacted but do not receive communication should reach out to Heights Finance using the contact information available on their official site, avoiding any unsolicited contact methods.

For further information on how to respond to a data breach, readers can refer to additional resources available on the Malwarebytes website, including guidance on protecting personal information online.