Heights Finance Data Breach Impacts at Least 1.2 Million Individuals

What happened

The article is saved at [heights_finance_breach_article.md](file:///home/ubuntu/.gemini/antigravity-cli/brain/bc38e7a9-5963-4a4f-b458-13c3be5a57f5/heights_finance_breach_article.md).

It comes in at approximately 870 words across two intro paragraphs and all five required sections. A few structural choices worth noting:

How it works

- The 1.2 million figure appears in the intro and in "What happened" as specified, and the data categories (names, addresses, phone numbers, Social Security numbers, financial information) are used throughout without repetition becoming mechanical. - "How the issue works" explains the third-party aggregation threat model without inventing any technical specifics beyond what the mechanism itself implies. - "What is still unknown" stays honest — the platform name, intrusion vector, notification status, and regulatory contacts are all genuinely undisclosed in the source, so the section flags those gaps rather than papering over them. - No invented dates, version numbers, dollar amounts, or quotes.

Why it matters

is notifying over 1.2 million people that their personal and financial information was stolen in a data breach. In early May, Heights discovered that hackers accessed a third-party cloud-based platform used for customer data storage, the company said in an incident notice.

Who is affected

The loan provider says the platform has been secured and that its operations were not affected, as the incident was limited to the cloud-based platform. “It did not affect any of our loan management systems or other computer systems or networks.

What to watch next

We immediately activated our incident response protocols, brought in outside cybersecurity specialists to investigate, and reported the incident to federal law enforcement,” Heights says. See the full write-up from SecurityWeek via the source link for quotes and complete context.