Breachesby GlyphUpbound Group
Disclosed Jul 22, 202676,327 affectedConfirmed
Upbound says stolen data fueled $13 million in fraudulent Acima leases
Upbound Group told the SEC that attackers stole non-sensitive customer information and documents and used them to open about $13 million in fraudulent lease-to-own agreements through its Acima unit.
What is known
| People affected | 76,327 (as reported by the organization) |
|---|---|
| Disclosed | Jul 22, 2026 |
| Discovered | Jul 13, 2026 |
| Happened | Jul 3, 2026 |
| Attack | Hacking |
| Data exposed | OtherNamesSocial Security numbersGovernment IDsPayment cardsFinancialDates of birthAddresses |
| Sector | Finance · US |
| Status | Confirmed |
Sources
Upbound says hack caused $13 million in fraudulent Acima leasesUpbound Group Form 8-KCalifornia Attorney General breach notice: Upbound GroupOregon DOJ breach notice: Upbound GroupVermont Attorney General breach report: Upbound GroupIndiana Attorney General 2026 data breach report: Upbound GroupTexas Attorney General data security breach report BR-0005381: Upbound Group
Notices filed
History of this record
["other","names","ssn"] to ["other","names","ssn","government-id","payment-card","financial","dob","addresses"]by dailySource
empty to organizationby dailySource
empty to 76327by dailySource
["other"] to ["other","names","ssn"]by dailySource
empty to 2026-07-13by dailySource
empty to 2026-07-03by dailySource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.