Upbound Group Data Breach Exposes Consumer Data, Identity Risks

If you recently received a data breach notification letter from Upbound Group, Inc., you are among the consumers affected by a cybersecurity incident reported on September 26, 2026, in Vermont. This notification confirms that an unauthorized party gained access to their network, compromising highly sensitive personal and financial records.

The exposed information includes your Full Name, Social Security Number, Date of Birth, Driver's License Number, Financial Account Number, Routing Number, Credit Score Information, Mailing Address, and Phone Number. This combination of data is extremely valuable to criminals, creating a significant risk of identity theft, financial fraud, and unauthorized account access.

Upbound Group, which operates companies like Rent-A-Center, handles vast amounts of personal consumer data. As such, they are legally obligated to protect this information with robust security measures. The occurrence of this breach, formally reported to the Vermont Attorney General, suggests potential shortcomings in these critical safeguards.

Receiving an official breach notification is a direct acknowledgment that your personal data was compromised. This establishes your standing to pursue legal recourse. You do not need to wait until you become a victim of fraud or identity theft to explore your options; the mere exposure of your data creates actionable harm and risk.

Our legal team is currently investigating claims related to the Upbound Group data breach. We believe consumers whose data was exposed deserve accountability and compensation for the risks and potential damages they now face. If you received a notification, we invite you to contact us for a confidential, free case review. We work on a contingency fee basis, meaning there are no upfront costs for you.