Business Context and Reporting Period
Company: Upbound Group, Inc. (UPBD)
Filing Type: Form 8-K (Current Report)
Date of Report: July 21, 2026
Event: Disclosure of cybersecurity incidents and related fraudulent lease-to-own agreements affecting the Acima segment.
Key Financial Metrics
Revenue, Profit, Cash Flow, Margins, Debt, Liquidity: The filing text does not provide specific values for revenue, profit, cash flow, margins, debt, or liquidity metrics for the reporting period.
Specific Financial Impact: The Company reported elevated fraudulent contract losses of approximately $13 million in the Acima segment during the second quarter of 2026, attributed to the unauthorized use of compromised data.
Material Changes and Events
- Cybersecurity Incidents: Unauthorized access to certain non-sensitive customer information and other documents occurred.
- Fraudulent Activity: Compromised information was used to facilitate fraudulent lease-to-own agreements.
- Materiality Assessment: Based on current knowledge, the Company believes the incidents are not material. However, the Company will reassess materiality if facts or circumstances substantively change.
Guidance, Outlook, and Risks
Management Actions:
- Implemented mitigation measures including enhanced authentication controls and additional fraud detection capabilities.
- Engaged external cybersecurity experts.
- Notified federal law enforcement.
Outlook and Risks:
- The investigation remains ongoing; further legal or regulatory notifications may be made based on findings.
- Forward-looking statements are subject to risks including new information regarding the incidents, economic conditions, inflation, credit availability, and potential recession.
- The Company undertakes no obligation to update forward-looking statements except as required by law.
Investor Verification Checklist
- Verify the final scope of the data breach and whether "non-sensitive" data classification holds upon full investigation.
- Monitor future filings for updates on the $13 million loss figure and potential additional fraudulent contract losses.
- Review the Company's reassessment of materiality should the investigation reveal new substantive facts.
- Check for any regulatory penalties or legal actions resulting from the notification to federal law enforcement.