Upbound Group, Inc. data breach

Clerk's notes

Upbound Group, Inc., a key player in the lease-to-own and financial services sector, has filed a report with the Oregon Attorney General concerning a data security incident. The breach, which was identified on July 3, 2026, was officially reported to state authorities on September 28, 2026.

The compromised data categories include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Mailing Address, Driver's License Number, and Transaction History. This extensive combination of personal and financial identifiers carries significant implications for those whose information was exposed.

Exposure of such detailed personal and financial data can lead to various forms of misuse, including identity theft, unauthorized account access, and fraudulent transactions. Individuals should remain vigilant for suspicious activity across their financial accounts and credit reports following a notification of this nature.

Companies entrusted with sensitive consumer data, such as Upbound Group, Inc., are legally obligated to implement robust security measures. A data breach of this scope suggests potential vulnerabilities in their security infrastructure, which may indicate a failure to uphold this duty of care to their customers.

If you have received a data breach notification letter from Upbound Group, Inc., your personal and financial information is confirmed to have been compromised. While the investigation status is currently 'monitoring,' understanding your legal rights in such a situation is a critical next step. Our firm is currently reviewing cases for individuals impacted by this incident, offering a free case review to help you assess your options. There are no out-of-pocket costs to you for this review.

If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.