Upbound Group 2026 Data Breach
The Upbound Group 2026 data breach covers incidents that the company confirmed in its July 21, 2026 SEC Form 8-K: certain non-sensitive customer information and other documents were obtained without authorization.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
2- Non-sensitive customer information
- Other documents
About This Breach
Upbound said information from some incidents helped facilitate fraudulent lease-to-own agreements and contributed to approximately $13 million in elevated fraud losses in its Acima segment during the second quarter of 2026.
The confirmed scope is limited to non-sensitive customer information and other documents. The affected-person count, individual fields, exact timing, and access method were not disclosed. This record therefore does not show which information, if any, was exposed for a particular customer.
Notice recipients should rely on the scope in their official letters. Verify contract, payment, or account-change requests using official Upbound or Acima channels; this public record alone is not evidence of a person-level match.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
