Heights Finance Holdings Co. published a data breach notice on August 11, 2026, after discovering suspicious activity on May 7, 2026. The incident involved a third-party cloud-based platform used to store certain customer data. The notice said an unauthorized actor may have viewed or copied information.
The company described the potentially affected information as personal and financial information but did not identify specific data elements or provide an affected-individual count in the available source. The notice concerned people who received or applied for a loan and people with prior connections to Curo Management or related brands. Further details may be provided as the company’s review and notifications continue.