RCI, LLC
ent_cdaaffee8ff1c44b40233c47
Disclosures
4
State AG · 4 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
10
as filed · State AG NH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- RCI, LLC
- Normalized
- rci— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- ⛰️New Hampshire State AGas victim2024-03-01
RCI, LLC notified the NH Attorney General of a security incident involving MOVEit Transfer. The CLOP group exploited a vulnerability in the software between May 31 and June 1, 2023, to access files. RCI determined on January 19, 2024, that government ID numbers of 10 NH residents were compromised. RCI mailed notifications on March 1, 2024, and offered one year of credit monitoring.
- 🦬Montana State AGas victim2024-03-01
RCI, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-03-01. The breach occurred on 5/31/2023. 2 Montana residents were affected.
- 🐻California State AGas victim2024-03-01
RCI, LLC notified the California AG of a data breach involving the MOVEit Transfer platform. The threat actor CLOP exploited a previously unknown vulnerability in Progress Software's MOVEit Transfer application to access and exfiltrate files between May 31 and June 1, 2023. Affected data included names, addresses, and government identification numbers (including SSNs). RCI engaged forensic investigators, patched the application, implemented additional access controls, and is providing one year of credit monitoring to affected individuals.
- 🍁Vermont State AGas victim2024-03-01
RCI, LLC notified consumers of a data breach involving the MOVEit Transfer vulnerability exploited by the CLOP threat actor between May 31 and June 1, 2023. The incident exposed names, addresses, and government identification numbers (including SSNs). RCI engaged forensic investigators, implemented additional access controls, and provided one year of credit monitoring to affected individuals.