Upbound Says Stolen Customer Data Fueled $13 Million in Acima Lease Fraud
Summary
Upbound said customer information and documents obtained without authorization were used to create fraudulent Acima leases, causing about $13 million in second-quarter losses. The company has strengthened controls and continues investigating.
Key points
- Upbound disclosed in an SEC filing that customer information and documents were obtained without authorization.
- The information was used to create fraudulent Acima lease-to-own agreements and obtain goods from participating retailers.
- Upbound reported about $13 million in losses in its Acima segment during the second quarter.
- The company said it introduced stronger authentication, additional fraud detection, and improved monitoring after detecting the incident.
- Upbound notified federal law enforcement and is continuing its investigation; the article says the company did not provide the number of affected customers.
Article Details
- Victim Organization
- Upbound Group
- Incident Type
- Unauthorized access to customer information and documents, which were used to create fraudulent Acima lease-to-own agreements and obtain goods.
- Data Types Exposed
- Non-sensitive customer information
- Other documents
- Operational Impact
- The fraud caused approximately $13 million in losses in Upbound's Acima segment during the second quarter. The company implemented enhanced authentication, fraud-detection, and monitoring controls and continues to investigate.
- Ransom Or Extortion
- No ransomware groups or data-extortion threat actors had publicly claimed the attack at the time of reporting.
- Claim Status
- confirmed