Did Upbound Group, Inc. have a data breach?

Answer

Yes. Upbound Group, Inc. reported a data breach to the Vermont Attorney General on September 26, 2026.

What the filing says

Reported to: Vermont Attorney General
Filing date: September 26, 2026
Breach date: Not stated in the filing
People affected: Not stated in the filing

Information involved

Full Name
Social Security Number
Date of Birth
Driver's License Number
Financial Account Number
Routing Number
Credit Score Information
Mailing Address
Phone Number

In plain terms

Upbound Group, Inc. filed a data breach notification with Vermont authorities on September 26, 2026, confirming an unauthorized compromise of its systems. This incident exposed a range of sensitive personal and financial data, potentially increasing risks like identity theft and financial fraud for affected individuals.

Upbound Group, Inc., known for its Rent-A-Center and Acceptance Now brands, officially reported a data breach incident to Vermont regulators on September 26, 2026. The company’s filing indicates an unauthorized compromise of its network infrastructure. The specific type of breach was not detailed in the public notification.

The information reported as exposed in this security incident includes Full Name, Social Security Number, Date of Birth, Driver's License Number, Financial Account Number, Routing Number, Credit Score Information, Mailing Address, and Phone Number. This combination of personal and financial identifiers can create significant risks for those affected.

As a leader in consumer financial services, Upbound Group, Inc. handles extensive sensitive customer data for lease agreements and financial accounts. Individuals who receive a direct notification from Upbound Group, Inc. should review its contents carefully to understand what information was involved in their specific case.

Individuals concerned about their data should consider common protective measures. These include regularly reviewing credit reports from the three major bureaus for any unauthorized activity, monitoring bank and credit card statements, and being cautious of unsolicited communications that request personal information. These steps can help detect and mitigate potential misuse of exposed data.

Other filings by Upbound Group, Inc.

Companies often file the same breach in several states. Each filing is listed separately.

Commonly recommended next steps

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Replace exposed ID documents
Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Look up another company

Other breaches reported in Vermont

DataBreachSearch.com reports what was filed with state regulators. It is not legal advice, is not a law firm, and is not affiliated with any government agency or with Upbound Group, Inc..