The record
Written from the 1 report below. Nothing here is unsourced.
- Upbound Group, the US lease-to-own company formerly known as Rent-A-Center, disclosed in a SEC filing that attackers stole non-sensitive customer data from its systems.
- The thieves used that data to fraudulently obtain goods through its Acima lease-to-own programme, taking merchandise without making lease payments and causing about $13 million in losses in the second quarter.
- The company says it has brought in outside cybersecurity experts and added stronger authentication, fraud detection and monitoring, and has notified federal law enforcement.
- Upbound continues to investigate and has not said how many customers were affected.
What to watch next
- The outcome of Upbound's ongoing investigation, including any additional actions announced.
- Disclosure of how many customers were affected, which the company has not yet provided.
- Whether any ransomware or data extortion group publicly claims the attack.
Coverage1
1 report
International1
All filed from United States
Named United States · Acima Leasing · Upbound Group · Federal law enforcement authorities · Threat actors · U.S. Securities and Exchange Commission
The 1 report is listed beside the record.
Ask this story
Answers cite the reports above, or say they can't.