HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
RCI Internet Services
bd_de36ff1d1abec9fb · schema v1 · pii pii-v1
Full breach record for RCI Internet Services →RCI Internet Services, Inc. reported an external system breach (hacking) occurring on March 19, 2026, discovered on May 13, 2026. The incident affected approximately 40,178 individuals, including 257 Maine residents. The breach involved the acquisition of personal identifiers, including government IDs. RCI provided written notification and offered 12 months of credit monitoring and identity theft protection services through IDX.
Maine clockDiscovered May 13, 2026 → Filed with AG Jun 2, 202620d ✓ ME AG ≤30d20 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e1970dead6647d02Texas State AGfiled 2026-06-01(1d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f77cf12d-ecb8-44d2-9c23-98dc0a60ca68.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 2, 2026
- Raw hash
- ea032ee9feff17d0990cff710005c405ea9d6dd8e8277b57fb349db30e61c4cc
Reporting entity
- Name
- RCI Discovernorm: rci discover
- Domain
- discover.rci.com
Victim entity
- Name
- RCI Internet Servicesnorm: rci internet
Incident
- Discovered
- May 13, 2026
- Materiality determined
- —
- Notification sent
- May 28, 2026
- Affected individuals
- 40,178
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 20d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 13, 2026→ Filed with AG: Jun 2, 202620d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.