Upbound Hack Results in $13 Million Fraudulent Acima Leases

Upbound Hack Results in $13 Million Fraudulent Acima Leases 🚨

The Upbound Group, a fintech company, has revealed that a recent cyberattack led to the creation of $13 million in fraudulent Acima leases. In a filing with the U.S. Securities and Exchange Commission (SEC), Upbound disclosed that it experienced cybersecurity incidents where certain non-sensitive customer information was obtained without authorization.

The attackers exploited this information to commit fraud in lease-to-own agreements, resulting in significant financial losses in the Acima segment during the second quarter of this year. Upbound Group, previously known as Rent-A-Center, is a key player in the alternative finance and rental sector, operating brands such as Acima Leasing, Rent-A-Center, Brigit, and Upbound Mexico. Acima offers lease-to-own payment options through various retailers and e-commerce platforms.

According to the SEC filing, the attackers used stolen customer data to acquire goods through Acima’s lease-to-own system under fraudulent agreements. While Acima compensated the participating retailers for these goods, the fraudsters absconded with the merchandise and failed to fulfill their lease obligations, leading to approximately $13 million in losses.

Upon detecting the hack, Upbound promptly initiated mitigation and remediation measures with the assistance of external cybersecurity experts. These measures include enhanced authentication controls, additional fraud-detection mechanisms, and improved monitoring. Furthermore, federal law enforcement authorities were notified. Upbound is continuing its investigation into the incident and will take further action based on its findings. So far, evidence suggests that the cyberattack did not significantly impact investment decisions, and no ransomware groups or data extortion actors have publicly claimed responsibility for the attack on Upbound.

For more details, Read full article