Did Upbound Group, Inc. have a data breach?

In plain terms

Upbound Group, Inc. reported a data breach to the Texas Attorney General on October 2, 2026, following an incident on July 3, 2026. This compromise exposed sensitive customer information, including Full Name, Social Security Number, and financial details. Individuals whose data was affected face increased risks of identity theft and financial fraud, necessitating vigilance over personal accounts and credit reports.

Upbound Group, Inc., the holding company for brands like Rent-A-Center, officially reported a data breach to the Texas Attorney General on October 2, 2026. The incident, which is currently under monitoring, occurred on or about July 3, 2026, impacting the company's digital infrastructure.

According to the official filings, the information exposed in this security incident includes individuals' Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Credit and Payment History, Mailing Address, and Phone Number. These details are reported directly from the company's notification to regulators.

The exposure of such a comprehensive set of personal and financial identifiers creates a significant risk for affected individuals. This combination of data can be used for various forms of identity theft, fraudulent account creation, unauthorized transactions, and targeted phishing scams, extending potential risks beyond immediate financial impact.

Individuals who receive a data breach notification from Upbound Group, Inc. should take immediate steps to protect their information. It is advisable to review financial account statements and credit reports regularly for any unauthorized activity. Placing a fraud alert or security freeze on credit files with the three major credit bureaus (Equifax, Experian, and TransUnion) can also help prevent new fraudulent accounts from being opened in your name.

Consider changing passwords for online accounts, especially those that may have shared credentials or are linked to financial services. Utilizing multi-factor authentication whenever available adds an additional layer of security. Staying informed about potential phishing attempts and being cautious of unsolicited communications requesting personal data is also crucial.