Heights Finance Data Breach Exposes Social Security Numbers

Greenville-based consumer lender, Heights Finance Holdings Co., disclosed a data breach involving sensitive personal and financial information. The company operates through brands including Heights Finance, Covington Credit, Quick Credit and Southern Finance.

On May 7, 2026, Heights Finance discovered that an unauthorized actor had gained access to a cloud-based platform hosted by a third party, according to the company's notification. The company used this platform to store certain customer data. The unauthorized activity was limited to the cloud-based platform only and did not affect any of the company's loan management systems or other computer systems or networks.

The types of personally identifiable information exposed may include names, addresses, phone numbers, email addresses, account details, bank account information (including bank name, account number and routing number), Social Security numbers, tax IDs, driver's license numbers, state ID numbers and dates of birth.

The exposed data may also have included information voluntarily provided by consumers, such as personal circumstances shared during customer service interactions.

According to the notification, individuals may be affected if they received a loan through Heights Finance, inquired about or applied for a loan product (including through a third party), or were former borrowers of Curo Management or any of its former or current related brands.

The breach was reported to the Vermont Attorney General on Aug. 11, 2026, with 21 Vermont residents identified as affected. Heights Finance discovered the breach on May 7, 2026. The company posted a notice on its website providing details about the incident and steps consumers can take to protect their information.

Heights Finance's response

Heights Finance is offering 24 months of free credit monitoring and identity protection services through a third-party provider called Epiq. The company strongly encouraged all affected individuals to take advantage of these services, according to the notification.

To enroll, individuals should first call Heights Finance's dedicated call center at 877-343-7785, Monday through Friday, 9:00 a.m. to 9:00 p.m. ET, to receive a unique activation code. They can then visit www.privacysolutionsid.com, click "Activate Account" and complete the enrollment form and identity verification process.

After completing enrollment, individuals will receive a confirmation email from Epiq with a link to access their account. For help with the enrollment process, individuals can contact Epiq directly at 866-675-2006, Monday through Friday, 9:00 a.m. to 5:30 p.m. ET. The deadline to enroll is Nov. 9, 2026.

The company noted that credit monitoring through Epiq may not be available for individuals who do not have established credit, a U.S. address or a valid Social Security number. Individuals with additional questions or concerns can reach Heights Finance through its dedicated call center at 877-343-7785.