Upbound Group, Inc.
bd_5c5e455a0ccbb1ee · schema v1 · pii pii-v2
Full breach record for Upbound Group, Inc. →3 incidents on fileUpbound Group, Inc. notified the California Attorney General of a cybersecurity incident where an unauthorized third party accessed cloud-stored files between July 3 and July 6, 2026. The company discovered the incident on July 13, 2026. Personal information was affected. The company engaged a cybersecurity expert, implemented containment measures, and offered one year of credit monitoring via Experian. Rhode Island residents were specifically noted as potentially impacted.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 3, 2026
Begins
Jul 13, 2026
Discovered
Sep 27, 2026
Filed
vs. sector median
+3 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Oregon State AGbd_3a39187833be307e2026-09-28 · +1dVerified
- Vermont State AGbd_293227e01d72e3ca2026-09-26 · +1dCandidate
- New Hampshire State AGbd_e86a7aa4e63c30f02026-09-26 · +1dVerified
- Indiana State AGbd_3f5c63ea6ffdc3ab2026-09-23 · +4dVerified
Show 1 more filing ↓Show fewer ↑up to 5d gap
- Texas State AGbd_f5c73a2eb6dd4e422026-10-02 · +5dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Sep 23 (IN), last Oct 2 (TX) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.