Upbound Group, Inc. disclosed in a Form 8-K filed on July 21, 2026, that it recently experienced cybersecurity incidents in which certain non-sensitive customer information and other documents were obtained without authorization. The company believes the compromised information was subsequently used to facilitate fraudulent lease-to-own agreements within its Acima segment, a business line that provides virtual lease-to-own solutions through retail partners.
The fraudulent activity contributed to elevated contract losses of approximately $13 million during the second quarter of 2026. While the company characterized the accessed information as non-sensitive customer data, the breach was significant enough to enable third parties to originate illegitimate lease agreements, directly impacting the segment's financial performance.
Response and remediation efforts
Upon identifying the data compromise, Upbound Group began implementing mitigation and remediation measures in coordination with external cybersecurity experts. The company's response includes enhanced authentication controls, additional fraud detection and monitoring capabilities, and other security improvements designed to prevent similar incidents. Federal law enforcement has been notified, and the company stated it will make any required legal or regulatory notifications as its investigation proceeds.
The investigation remains ongoing. Based on the company's current assessment of the quantitative and qualitative facts, management believes the incidents are not material. However, the filing notes that this determination could change if relevant facts and circumstances evolve, at which point the company would reassess materiality under Item 1.05 of Form 8-K.
Financial context
The $13 million in fraudulent contract losses represents a direct financial impact tied to the cybersecurity breach, distinguishing this disclosure from a purely precautionary notice. The Acima segment, which Upbound Group acquired in 2021, operates a digital platform that allows consumers to lease merchandise from retail partners with an option to purchase. The nature of the business, which relies on rapid digital underwriting and approval processes, makes robust fraud detection systems particularly important.
The filing includes standard forward-looking statement cautions, noting that the discovery of new information about the incidents, along with broader economic conditions affecting consumer payment behavior and credit availability, could cause actual results to differ materially from current expectations. Upbound Group, formerly known as Rent-A-Center, is headquartered in Plano, Texas, and trades on Nasdaq under the symbol UPBD.