Upbound Group Data Breach Exposes Full Name, SSN, Financial Details

Upbound Group, Inc., known for brands like Rent-A-Center, formally reported a cybersecurity incident to the Vermont Attorney General in 2026. This breach involved unauthorized access to the company's network infrastructure, which handles extensive personal and financial data for millions of consumers. While the exact method of attack remains under investigation, such incidents often stem from sophisticated cyberattacks targeting financial services and retail credit sectors.

The compromised information includes a critical combination of sensitive identifiers. Affected individuals face the exposure of their Full Name, Social Security Number, Date of Birth, Driver's License Number, Financial Account Number, Routing Number, Credit Score Information, Mailing Address, and Phone Number. This specific data set is highly valuable to malicious actors and dramatically increases the risk of identity theft, financial fraud, and other serious harm.

As a financial services entity managing highly sensitive consumer data, Upbound Group, Inc. is legally obligated to implement robust security measures under state laws, including the Vermont Data Broker and Security Breach Notice Act, and federal regulations like the FTC Act. The occurrence of a breach involving such extensive personal and financial data suggests potential failures in upholding these mandated security duties, indicating inadequate safeguards to protect customer information.

If you received a data breach notification letter from Upbound Group, Inc., it confirms that your confidential information was compromised due to this security incident. Receiving this letter establishes your legal standing to pursue potential claims, even if you haven't experienced direct financial fraud yet. Courts increasingly acknowledge that the imminent threat of future identity theft and the costs of mitigation are actionable injuries.

Our firm is currently investigating potential class action claims on behalf of individuals affected by the Upbound Group breach. We operate on a contingency fee basis, meaning there are no upfront costs to you, and we only receive payment if we successfully secure a recovery. Contact us for a free case review to discuss your rights and options.