Upbound Group, Inc. data breach

Clerk's notes

Upbound Group, Inc., a company specializing in consumer services and lease-to-own retail, reported a data security incident to the California Attorney General on September 27, 2026. This breach, which was initially discovered on July 3, 2026, is currently under monitoring, indicating an ongoing assessment of the situation.

The reported exposure includes a comprehensive array of sensitive personal and financial identifiers. Affected individuals may have had their Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Mailing Address, Credit and Payment History, and Driver License Number compromised. This extensive data set presents substantial risks for identity theft and financial fraud.

As an enterprise facilitating retail installment contracts, lease-purchase agreements, and consumer financing, Upbound Group, Inc. is entrusted with vast quantities of private consumer data. The occurrence of this data breach suggests potential vulnerabilities in the company's cybersecurity protocols, which are legally mandated to protect such sensitive information under California law and federal standards.

If you received a data breach notification letter from Upbound Group, Inc., it indicates your personal data was part of this compromise. Even without immediate financial loss, the increased risk of future identity theft and the effort required to mitigate it are recognized harms under consumer protection laws.

Understanding your options after a data breach can be complex. You can request a free case review to discuss how this incident may affect you and explore any available legal recourse. There are no upfront costs for this review.

If a notification letter about this breach reached you, see every California data breach on file or browse all cases.