Upbound Group Discloses 2026 Data Breach of Customer Financial Information

If you received a data breach notification letter from Upbound Group, Inc., it signifies that your sensitive personal information was affected by a cybersecurity incident. The company, known for brands like Rent-A-Center, formally reported this breach to the Vermont Attorney General on September 26, 2026, indicating that an unauthorized party accessed its network infrastructure.

The compromised data in this incident includes a range of highly sensitive details. Specifically, the breach exposed individuals' Full Name, Social Security Number, Date of Birth, Driver's License Number, Financial Account Number, Routing Number, Credit Score Information, Mailing Address, and Phone Number. This specific combination of data presents significant risks, as it can be used for identity theft, fraudulent financial transactions, and other forms of consumer fraud.

Companies like Upbound Group, which handle extensive consumer financial and personal data, are obligated to protect this information with robust security measures. The occurrence of a data breach of this nature suggests potential vulnerabilities in the company's administrative, technical, or physical safeguards designed to prevent unauthorized access to customer records.

Upon receiving a breach notification, it is prudent to take immediate steps to protect yourself. We recommend closely monitoring your financial accounts and credit reports for any suspicious activity. Consider placing a fraud alert or a credit freeze with major credit bureaus (Equifax, Experian, and TransUnion) to prevent new accounts from being opened in your name.

Receiving an official data breach letter from Upbound Group establishes a legal basis for you to explore your options. Many individuals who receive such notifications are unaware that they may have legal rights to seek accountability and potential compensation. Our firm offers a free, no-obligation case review to help you understand what this breach means for you and whether you qualify for legal recourse.