A major fintech company, Upbound Group, has revealed that a sophisticated cyberattack has resulted in $13 million worth of fraudulent lease-to-own agreements through its Acima platform. The attack, which compromised sensitive customer information and documents, allowed threat actors to obtain goods under fake leases, leaving the company to foot the bill for unpaid merchandise.
Upbound Group, formerly known as Rent-A-Center, provides financial solutions and lease-to-own products through several brands, including Acima Leasing, Rent-A-Center, Brigit, and Upbound Mexico. Acima offers payment options to customers looking to purchase goods from third-party retailers or e-commerce sites. In this case, the attackers used stolen customer data and documents to create fake lease agreements with participating retailers, who were paid for the goods but never received payment.
The company’s systems were breached when threat actors obtained non-sensitive customer information and other documents without authorization. Upbound Group claims that it took swift action after detecting the hack, implementing enhanced authentication controls, additional fraud-detection mechanisms, and improved monitoring to prevent further exploitation. The company also notified federal law enforcement authorities and continues to investigate the incident.
It’s worth noting that the breach did not appear to have a significant impact on investment decisions, but the financial losses are substantial. As of now, no ransomware groups or data extortion threat actors have publicly claimed responsibility for the attack. However, this incident serves as a stark reminder of the importance of robust cybersecurity measures in preventing and mitigating such attacks.
In an effort to prevent similar breaches, security teams should regularly test their systems to ensure that detection mechanisms are effective. According to recent research, security teams log 54% of successful attacks but alert on just 14%, leaving the remaining threats to move undetected through their environment. Regular breach and attack simulation tests can help identify vulnerabilities and improve overall cybersecurity posture.
As a consumer, it’s essential to be cautious when using online services, especially those that require sensitive financial information. Always verify the authenticity of any website or service before sharing personal data, and keep an eye out for suspicious activity on your accounts. Upbound Group’s experience serves as a warning sign that even well-established companies can fall victim to sophisticated cyberattacks. By staying vigilant and taking proactive measures to protect ourselves and our organizations, we can minimize the risk of similar incidents occurring in the future.
Source: Bleeping Computer — 2026-07-22