Upbound Group said it recently experienced a cybersecurity incident in which customer information and documents were obtained without authorization.
The owner of Rent-A-Center and Brigit said it believes the obtained information was subsequently used to facilitate fraudulent lease-to-own agreements. As a result, Upbound expects its Acima business to report elevated fraudulent contract losses of about $13 million during the second quarter.
Upbound said its investigation of the incident remains ongoing, but at this time, the company believes the incident wasn't material.
Upbound quickly began implementing mitigation and remediation measures upon learning of the breach, working with external cybersecurity experts to enhance authentication controls and to implement additional fraud detection and monitoring capabilities, the company said. It additionally notified federal law enforcement, it said.
Write to Connor Hart at connor.hart@wsj.com
(END) Dow Jones Newswires
July 22, 2026 06:51 ET (10:51 GMT)
Copyright (c) 2026 Dow Jones & Company, Inc.
Comments