Where does the Upbound Group, Inc. case file come from?

Every entry is taken from the breach report Upbound Group, Inc. lodged with the Washington Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Upbound Group, Inc. Data Breach

This file collects the dated facts on record for the Upbound Group, Inc. incident. The state report is dated September 26, 2026.

Timeline

September 26, 2026Report filed in WashingtonDate the notice was lodged with the Washington Attorney General.

Case facts

Filing state: Washington
Date reported: September 26, 2026
Receiving office: Washington Attorney General

Case notes

Upbound Group, Inc. submitted a data breach notification to the Washington Attorney General's office on September 26, 2026. The company did not specify the nature of the breach or the exact date it occurred. This public filing serves as official documentation of the incident.

The filing indicates that the company is currently monitoring the situation. Details regarding the specific types of personal information that may have been involved were not provided in the public record. Similarly, the number of individuals potentially affected by this incident remains unspecified.

When a data security incident occurs, it is generally recommended that individuals review statements from their financial institutions and monitor their credit reports for any signs of unauthorized activity. Be wary of unsolicited communications that appear to be from Upbound Group, Inc. and ask for personal details.

Consider enabling two-factor authentication on online accounts whenever possible. This adds an extra layer of security beyond just a password. Regularly update passwords for important accounts with strong, unique combinations.

This report is based on the information made public by Upbound Group, Inc. through their filing with the Washington Attorney General. For the most current and specific details, individuals should refer to any direct communications they receive from Upbound Group, Inc. regarding this incident.

Questions about this case file

Where does the Upbound Group, Inc. case file come from?: Every entry is taken from the breach report Upbound Group, Inc. lodged with the Washington Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Washington data breaches

Filing source: Washington Attorney General

Named in the Upbound Group, Inc. breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Washington case files