RCI HOSPITALITY HOLDINGS, INC.

RCI Internet Services, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-06-12. The reporting organization type is Other Commercial. 6 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers.

RCI Internet Services, Inc. notified individuals of a data security incident where unauthorized access occurred on March 19, 2026. The breach exposed names, SSNs, driver's licenses, and passport numbers. RCI engaged forensic experts, notified the FBI, and offered complimentary identity protection services through IDX.

RCI Internet Services, Inc. reported an external system breach (hacking) occurring on March 19, 2026, discovered on May 13, 2026. The incident affected approximately 40,178 individuals, including 257 Maine residents. The breach involved the acquisition of personal identifiers, including government IDs. RCI provided written notification and offered 12 months of credit monitoring and identity theft protection services through IDX.

RCI Internet Services, Inc. notified the New Hampshire Attorney General of a data event affecting approximately 46 NH residents. Unauthorized access occurred on March 19, 2026, exposing names, SSNs, driver's license numbers, and passport numbers. RCI engaged cybersecurity experts, notified federal law enforcement, and provided 12 months of credit monitoring via IDX.

RCI INTERNET SERVICES, INC filed a data-breach notice with the Illinois Attorney General in June 2026 (case 26-06-1242). The register records the breach as discovered on March 23, 2026. Personal information types reported: drivers license, passport number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

RCI Internet Services based in Houston, Texas, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-05-13 and reported on 2026-06-01. 15,553 Texas residents were affected. 40,178 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number. Consumers were notified via U.S. Mail.

RCI Internet Services, Inc. notified the California Attorney General of a data security incident. On March 23, 2026, the company became aware of a network disruption. Investigation revealed that certain files were accessed and acquired without authorization on March 19, 2026. Affected data may include names, Social Security numbers, driver's license numbers, and passport numbers. The company engaged cybersecurity experts, notified the FBI, and is offering identity protection services to affected individuals.

RCI Internet Services Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-03-19 and was reported on 2026-05-28. 760 Indiana residents were affected. 40,178 individuals affected in total.

RCI Internet Services, Inc., a subsidiary of RCI Hospitality Holdings, Inc., disclosed a cybersecurity incident that started March 19, 2026 and was discovered March 23, 2026. Its investigation found that a potential insecure direct object reference vulnerability was present on the company's internet information services (IIS) web server. The company believes independent contractors' personal information, including names, contact details, dates of birth, Social Security numbers, and driver's license numbers, was accessed without authorization. The company engaged third-party cybersecurity firms, enhanced security posture by expanding multifactor authentication, and disabled external access to the IIS. No customer information or financial systems were accessed.