Updated
Updated · TEISS · Jun 12
RCI Internet Services Says March Breach Exposed Data of 40,178 Customers
Updated
Updated · TEISS · Jun 12

RCI Internet Services Says March Breach Exposed Data of 40,178 Customers

1 articles · Updated · TEISS · Jun 12

Summary

  • 40,178 people had sensitive personal data compromised after RCI Internet Services disclosed a March security incident in a filing with Maine's attorney general.
  • Unauthorized access to RCI's internal network triggered a March 23 disruption, and the company said investigators found files were accessed and acquired without permission on March 19.
  • Names, Social Security numbers, driver's license numbers and passport numbers were exposed; RCI said it secured the network, brought in external cybersecurity experts and notified law enforcement.
  • One year of IDX identity protection and credit monitoring is being offered to affected individuals, while the company gave no details on the attacker, data volume or any ransom demand.
  • RCI Internet Services is the IT arm of RCI Hospitality Holdings, which operates hospitality and adult entertainment venues across the United States.

Insights

With lifetime data stolen, is one year of free credit monitoring an adequate corporate response?
How did a basic web flaw expose the Social Security and passport numbers of over 40,000 people?
As hotels adopt AI to track guests, is your personal data their next major security risk?