Heights Finance Breach Exposes Data of 734,828 People
Summary
Heights Finance reported that access to a third-party cloud platform exposed data for 734,828 people. Potentially affected information includes financial details and government IDs; the company says its other systems were not affected.
Key points
- Heights Finance said a hacker accessed a third-party cloud platform on May 7.
- Texas regulators were told that 734,828 people were affected.
- Potentially exposed information includes contact and banking details, Social Security numbers, tax IDs, driver’s license or state ID numbers, and information shared in customer service interactions.
- The company said the incident was limited to the cloud platform and did not affect its loan management systems or other networks.
- Heights Finance said it secured the platform and hired a cybersecurity firm to monitor for stolen information; the firm had found no evidence of the data on the dark web as of the report.
Article Details
- Victim Organization
- Heights Finance
- Incident Type
- Third-party cloud platform breach and data theft
- Data Types Exposed
- Contact information and addresses
- Bank account and routing numbers
- Social Security numbers
- Tax IDs
- Driver’s license and state ID numbers
- Information shared during customer service interactions
- Affected Records
- 734,828 people, according to Texas regulators
- Operational Impact
- The breach was limited to a third-party cloud platform used to store some customer data. Heights Finance said its loan management systems and other computer systems and networks were not affected, and that the platform had been secured.
- Ransom Or Extortion
- No ransom or extortion was reported. Heights Finance said a cybersecurity company was monitoring the dark web and had found no evidence that information from the incident was posted there.
- Claim Status
- confirmed