DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountIdentity (basic)Government IDPCIMediumResolved

Heights Finance

bd_37ae1efc696bbc5f · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 7, 2026

Filed

Aug 1, 2026

To disclose

—

Affected

62state residents only

Linked

7 filings

Confidence

65%
Full breach record for Heights Finance →

Heights Finance Holdings Co. discovered on May 7, 2026, that an unauthorized actor accessed a third-party cloud platform storing customer data. The incident involved contact details, financial account information, and government identifiers (including SSNs). The company activated incident response, engaged cybersecurity specialists, and reported to law enforcement. The investigation is complete, and the platform is secure. Credit monitoring is offered to affected individuals.

Incident timeline

May 7, 2026

Discovered

Aug 1, 2026

Filed

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filings ↓up to 13d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Illinois State AGAug 1 · first
Massachusetts State AGAug 1 · first · this page
Indiana State AG+10d
Vermont State AG+10d
New Hampshire State AG+10d
South Carolina State AG+11d
Texas State AG+13d

Pattern: first filing Aug 1 (IL), last Aug 14 (TX) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.