Texas-based consumer finance company Upbound Group, Inc. says recent cybersecurity incidents led to a data breach that resulted in millions of dollars in fraudulent contract losses.

Upbound offers lease-to-own and flexible payment solutions through brands like Rent-A-Center, Acima, and Brigit.

In a filing with the SEC, the company said non-sensitive customer information and other documents were recently obtained by hackers.

Upbound believes “the information was subsequently used to facilitate fraudulent lease-to-own agreements, contributing to elevated fraudulent contract losses of approximately $13 million in the Company’s Acima segment during the second quarter of 2026.”

The company has notified law enforcement and hired external cybersecurity experts to help boost the security of its systems.