Upbound says hack caused $13 million in fraudulent Acima leases