Heights Finance Holdings Co. (“Heights”) offers personal installment loans through its family of brands—Heights Finance, Covington Credit, Quick Credit and Southern Finance—at over 285 locations. Heights Finance is a subsidiary of Attain Finance, formerly Curo Group Holdings Corp. A third-party Heights vendor recently experienced a data security incident, potentially compromising the sensitive information of more than one million Heights customers.
On May 7, 2026, cloud platform Indico Data Solutions (“Indico”) concluded that it had experienced a data security incident. Also on May 7, 2026, Heights learned that its third-party cloud-based storage platform suffered a data breach. An investigation revealed that an unauthorized actor may have accessed online repositories containing information belonging to some Indico corporate customers. Consequently, some Heights customers’ Personally Identifiable Information (“PII”) and financial information may have been compromised. The compromised details include—but are not limited to—names, addresses, phone numbers, email addresses, account details, bank account information (including bank names, account numbers, and routing numbers), related financial data, social Security numbers, tax ID, driver’s license numbers, state ID numbers, dates of birth, and information voluntarily provided by consumers, such as personal circumstances shared during customer service interactions.
If you receive an Indico or Heights data breach notice letter, or if you are a current or former Heights Finance, Covington Credit, Quick Credit, or Southern Finance customer and believe you were impacted by this data breach, or if you are a current or former customer of any past or present U.S. Curo Management brands (First Heritage Credit, etc.) and believe you were impacted by this data breach, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.