Heights Finance, a Greenville, South Carolina-based personal loan company operating more than 285 offices across eleven states, has disclosed that hackers breached a third-party cloud platform it uses to store customer data in May 2026, exposing the sensitive financial and personal information of 734,828 people.
The company discovered the breach on May 7. According to its notification filed with Texas regulators, the stolen data includes names and contact information, bank account and routing numbers, Social Security numbers, tax identification numbers, driver’s license or state ID numbers, and any personal information that customers shared during service interactions. Heights Finance operates under multiple brands and is a subsidiary of Curo Management; the breach also swept up customers of related Curo brands who inquired about or received a loan through affiliated channels. The company says the intrusion was limited to the external cloud platform and did not reach its core loan management systems. A cybersecurity firm it retained is actively scanning dark web forums for signs that stolen data has been listed for sale, and as of the company’s notification had found none.
This is a serious exposure for affected customers. Social Security numbers combined with banking details give criminals everything needed for identity fraud, account takeover, and fraudulent loan applications — often for months or years after a breach occurs. Breach notifications are being sent to affected individuals by mail.
How to check if you’re affected
Affected products include personal loans, debt consolidation loans, and any loan application submitted through Heights Finance or its parent company Curo Management’s affiliated brands. If you have ever taken out a loan through Heights Finance, applied for one and provided personal information, or were referred through a third-party loan broker partnered with the company, your information may be included. Monitor your credit report for new accounts or inquiries you do not recognize — free weekly credit reports are available from the three major bureaus at AnnualCreditReport.com. Consider placing a free credit freeze with Equifax, Experian, and TransUnion to block fraudulent new credit applications using your Social Security number.