Heights Finance Holdings Co. Data Breach Exposes Sensitive Customer Information In August 2022, Heights Finance Holdings Co., a South Carolina-based consumer finance company, disclosed a data breach that compromised the personal and financial information of an undisclosed number of customers. The breach was reported to the Vermont Attorney General’s office, with at least 21 individuals in Vermont confirmed as affected, though the total number of impacted individuals across other states remains unclear. The exposed data includes highly sensitive details such as names, addresses, phone numbers, email addresses, bank account and routing numbers, Social Security numbers, tax ID numbers, driver’s license and state ID numbers, dates of birth, and even personal information shared during customer service interactions. Heights Finance, which operates under brands like Covington Credit, Quick Credit, and Southern Finance, specializes in personal installment loans, primarily serving individuals with limited access to traditional banking. The company was already facing legal scrutiny at the time of the breach, with the Consumer Financial Protection Bureau (CFPB) filing a lawsuit in August 2023 alleging unfair and abusive loan refinancing practices. Class action law firm Shamis & Gentile P.A. is now investigating the breach, advising affected individuals that they may be eligible for compensation for damages, credit monitoring, and other remedies. The firm is actively pursuing claims on behalf of those impacted.