DataBreachCaseFile.com

Case file

Case File: Upbound Group, Inc. Data Breach

This file collects the dated facts on record for the Upbound Group, Inc. incident. The state report is dated September 28, 2026. The incident itself is dated July 3, 2026.

Timeline

87 days separate the incident date from the date it was reported.

  1. July 3, 2026Incident dateWhen the filing says the breach took place.
  2. September 28, 2026Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state
Oregon
Date reported
September 28, 2026
Incident date
July 3, 2026
Receiving office
Oregon Attorney General

Data categories in the file

  • Full Name
  • Social Security Number
  • Date of Birth
  • Financial Account Number
  • Routing Number
  • Mailing Address
  • Driver's License Number
  • Transaction History

Case notes

Upbound Group, Inc., a prominent company in the lease-to-own and financial services sector, reported a data security incident to Oregon regulators on September 28, 2026. The company's filing indicates that the breach occurred on July 3, 2026, though the specific type of breach was not detailed.

The public filing specifies that the data exposed includes Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Mailing Address, Driver's License Number, and Transaction History. Such information is often collected by companies like Upbound Group due to the nature of their business operations, which involve evaluating creditworthiness and processing financial transactions.

While the filing did not specify the number of individuals affected or the exact method of compromise, incidents involving this scope of data exposure can lead to significant risks for those impacted. Unauthorized access to personal and financial identifiers can enable various forms of fraud and identity theft.

Individuals who believe they may be affected by this breach should take steps to monitor their personal and financial accounts. Regularly reviewing bank statements, credit card activity, and explanations of benefits for any unauthorized transactions or suspicious activity is recommended. It is also advisable to obtain free credit reports from the three major credit bureaus and check them for any unfamiliar accounts or inquiries.

Consider placing a fraud alert on your credit files, which makes it harder for identity thieves to open new accounts in your name. For a stronger measure, a security freeze can restrict access to your credit report altogether. Be wary of unsolicited communications, as exposed data can be used in phishing or social engineering schemes to trick individuals into revealing more information.

Questions about this case file

Where does the Upbound Group, Inc. case file come from?
Every entry is taken from the breach report Upbound Group, Inc. lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?
Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?
It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?
Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

More Oregon case files

Oregon data breaches

Filing source: Oregon Attorney General