On or about March 23, 2026, RCI Internet Services, Inc. (“RCI”) became aware of suspicious activity involving its network systems. According to the Notice of Data Event, the company promptly initiated an investigation and engaged independent cybersecurity experts to determine the nature and scope of the incident.
Following the initial investigation, RCI confirmed that an unauthorized actor accessed and acquired certain files without authorization on March 19, 2026. Because of the need to conduct a detailed review of affected files and determine impacted individuals, the company did not complete its review until May 13, 2026, at which time it began notifying those affected.
After identifying the impacted files, RCI worked to resecure its systems and enhance its security posture. The company also reported implementing additional safeguards and cooperating with law enforcement, including notifying the FBI.
RCI Internet Services, Inc. provides internet and technology services. Headquartered in Houston, TX, it manages the technical infrastructure, digital operations, and trademarks for its parent company’s nationwide portfolio of adult nightclubs, sports bars, and media.
RCI also stated that it is not aware of any misuse or attempted misuse of personal information as a result of the incident. However, the investigation confirmed that unauthorized access to certain data did occur.
Individuals whose information may have been involved began receiving written notification letters in May 2026. If you received a Notice of Data Event from RCI Internet Services, Inc., it confirms that your personal information may have been impacted by this security incident.
As part of its response, RCI is offering affected individuals complimentary identity protection services through IDX, including credit monitoring, dark web monitoring, identity theft recovery, and up to $1 million in identity fraud reimbursement coverage, provided individuals enroll by the stated deadline.
What information is involved in the RCI Internet Services Data Breach?
Compromised information may include:
First Name
Last Name
Social Security Number
Driver’s License Number
Passport Number
The specific data elements involved vary by individual and are detailed in each notification letter sent by RCI.
Your Personally Identifiable Information (PII) includes information that can be used to identify you. When sensitive identifiers such as Social Security numbers and government-issued IDs are exposed, the risk of identity theft and fraud increases significantly.
If your information was involved in this incident, it is important to remain vigilant. Impacted individuals are encouraged to review financial accounts, monitor credit reports, and consider placing fraud alerts or credit freezes.
Consumers may have legal rights when companies fail to adequately protect sensitive personal data.
If you received a Notice of Data Event from RCI Internet Services, Inc., your personal information may be at risk.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.