Upbound Group Faces $13 Million Loss from Data Breach and Fraudulent Leases

• •Upbound Group reported $13 million in losses due to a data breach and subsequent fraud.
• •Threat actors exploited stolen customer data to create fraudulent lease agreements.
• •The company is enhancing security measures and has notified federal law enforcement.

Upbound Group reported a data breach that allowed threat actors to steal non-sensitive customer information, leading to $13 million in fraudulent lease agreements through its Acima segment. The attackers exploited the stolen data to obtain goods via Acima's lease-to-own system, which were then not paid for. The incident was disclosed in an SEC filing, and the company has begun implementing enhanced security measures with external cybersecurity experts. Federal law enforcement has been notified, and the investigation is ongoing. No ransomware groups have claimed responsibility for the attack. Upbound Group, previously known as Rent-A-Center, is focused on mitigating the impact of this breach and preventing future incidents.