Heights Finance Data Breach: 4.1 Million Individuals Impacted

Greenville-based consumer lender, Heights Finance Holdings Co., disclosed a data breach involving sensitive personal and financial information.

According to the notification, individuals may be affected if they received a loan through Heights Finance, inquired about or applied for a loan product (including through a third party), or were former borrowers of Curo Management or any of its former or current related brands.

On May 7, 2026, Heights Finance discovered that an unauthorized actor had gained access to a cloud-based platform hosted by a third party. The company used this platform to store certain customer data.

The unauthorized activity was limited to the cloud-based platform only and did not affect any of the company's loan management systems or other computer systems or networks.

The types of personally identifiable information exposed may include names, addresses, phone numbers, email addresses, account details, bank account information (including bank name, account number and routing number), Social Security numbers, tax IDs, driver's license numbers, state ID numbers and dates of birth.

The exposed data may also have included information voluntarily provided by consumers, such as personal circumstances shared during customer service interactions.

A total of 4,132,834 individuals across the nation were impacted. Of the impacted total, 734,828 were residents of Texas, 486,463 of South Carolina, 182,731 of Indiana, 62 of Massachusetts, 26 of New Hampshire and 21 of Vermont.

The company posted a notice on its website providing details about the incident and steps consumers can take to protect their information.

Heights Finance's response

Heights Finance is offering 24 months of free credit monitoring and identity protection services through a third-party provider called Epiq. The company strongly encouraged all affected individuals to take advantage of these services, according to the notification.

To enroll, individuals should first call Heights Finance's dedicated call center at 877-343-7785, Monday through Friday, 9:00 a.m. to 9:00 p.m. ET, to receive a unique activation code. They can then visit www.privacysolutionsid.com, click "Activate Account" and complete the enrollment form and identity verification process.

After completing enrollment, individuals will receive a confirmation email from Epiq with a link to access their account. For help with the enrollment process, individuals can contact Epiq directly at 866-675-2006, Monday through Friday, 9:00 a.m. to 5:30 p.m. ET. The deadline to enroll is Nov. 9, 2026.

The company noted that credit monitoring through Epiq may not be available for individuals who do not have established credit, a U.S. address or a valid Social Security number. Individuals with additional questions or concerns can reach Heights Finance through its dedicated call center at 877-343-7785.