2026 Heights Finance — confirmed third-party cloud breach; 734,828 people (Texas AG); SSNs, bank/routing, DLs

Verified company notice plus Texas AG census — August 2026. Heights Finance Holdings Co. (Greenville, SC installment lender; 285+ offices / 11 states) posted an 11 August notice: on 7 May 2026 an unauthorized actor accessed a third-party cloud platform used to store certain customer data. Heights says the activity was limited to that platform and did not affect loan-management systems or other networks; it reported the incident to federal law enforcement, says the cloud store is now secure, and that operations continued. Fields may include contact data, bank name/account/routing, SSN/tax ID/driver’s license/state ID, DOB, and information volunteered in customer-service interactions. Population includes Heights loan recipients, people who inquired or applied (including through a third party), and former Curo Management / related-brand borrowers. The 11 August letter did not publish a headcount; Recorded Future News reported Heights told Texas regulators on 14 August that 734,828 people were affected. Heights said (as of the notice) dark-web monitoring had not found the set for sale and that no group had claimed the incident. Complimentary 24-month Epiq Privacy Solutions ID monitoring; enroll by 9 November 2026 via 877-343-7785 then privacysolutionsid.com. recordsAffected 734828 from the Texas census via The Record.