Upbound Group, Inc.
bd_e86a7aa4e63c30f0 · schema v1 · pii pii-v2
Full breach record for Upbound Group, Inc. →3 incidents on fileUpbound Group, Inc. notified the New Hampshire Attorney General of a cybersecurity incident discovered on July 13, 2026. An unauthorized third party gained access to cloud applications via a social engineering attack targeting an employee between July 3-6, 2026. Approximately 101 New Hampshire residents were affected, with personal information including names, addresses, phone numbers, emails, dates of birth, and Social Security numbers. Upbound engaged forensic experts, notified law enforcement, and provided one year of complimentary credit monitoring through Experian to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 3, 2026
Begins
Jul 13, 2026
Discovered
Sep 26, 2026
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Vermont State AGbd_293227e01d72e3ca2026-09-26Candidate
- California State AGbd_5c5e455a0ccbb1ee2026-09-27 · +1dVerified
- Oregon State AGbd_3a39187833be307e2026-09-28 · +2dVerified
- Indiana State AGbd_3f5c63ea6ffdc3ab2026-09-23 · +3dVerified
Show 1 more filing ↓Show fewer ↑up to 6d gap
- Texas State AGbd_f5c73a2eb6dd4e422026-10-02 · +6dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Sep 23 (IN), last Oct 2 (TX) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.