Upbound Group, Inc. Data Breach Exposes Customer Personal, Financial Data
By Data Breach Law Group | Posted on September 28, 2026 · Oregon
Upbound Group, Inc. reported a data breach to the Oregon Attorney General on September 28, 2026, stemming from an incident on July 3, 2026. This security lapse potentially exposed sensitive personal and financial details of its customers, raising significant concerns for identity theft and financial fraud.
DataBreachLawGroup.com has launched an investigation into the data breach reported by Upbound Group, Inc. to the Oregon Attorney General. The incident, which occurred on July 3, 2026, was officially reported on September 28, 2026, and may have compromised sensitive consumer information.
Upbound Group, Inc. operates major lease-to-own and financial services brands, necessitating the collection and storage of extensive personal and financial data. Due to the nature of its business, which involves credit evaluations and managing payment schedules, the company maintains detailed records essential for its operations.
The exposed data categories include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Mailing Address, Driver's License Number, and Transaction History. This combination of identifiers and financial details places affected individuals at heightened risk for various forms of fraud, including identity theft, unauthorized account access, and the opening of fraudulent credit lines.
Under state and federal regulations, including the Oregon Consumer Identity Theft Protection Act, companies like Upbound Group, Inc. are obligated to implement robust security measures to protect consumer data. The occurrence of this breach suggests a potential failure in these critical safeguards, which could include inadequate network monitoring or insufficient data protection protocols.
If you have received a data breach notification letter from Upbound Group, Inc., your personal and financial information may have been compromised due to this security incident. Your data's exposure itself can constitute legal harm, providing grounds for legal action.
DataBreachLawGroup.com is currently investigating potential claims related to the Upbound Group, Inc. data breach. We invite affected individuals to contact our firm for a free, no-obligation case review to understand their legal rights and options. Our investigation is conducted on a contingency fee basis, meaning there are no out-of-pocket costs unless we successfully secure compensation for you.
Source: Oregon Attorney General breach notification record
If you were affected
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Replace exposed ID documents
Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Did you receive a letter from Upbound Group, Inc.?
A case review is free and confidential. Tell us about your letter and we will explain your options.