RCI Hospitality discloses data breach exposing contractor SSNs and driver's licenses

Filed April 13, 2026 · Period ending April 7, 2026 · ~1 min read

Key Changes

• high

  Subsidiary RCI Internet Services discovered March 23 that hackers exploited a web server vulnerability starting March 19, accessing personal data of numerous independent contractors including social security numbers, driver's licenses, and contact information.

  Item 1.05 view on EDGAR →
• medium

  Company remediated the vulnerability by implementing multifactor authentication and disabling external server access; no customer information or financial systems were compromised and stolen data has not been publicly released.

  Item 1.05 view on EDGAR →
• medium

  Management expects no material impact on business operations but will incur investigation and remediation expenses; comprehensive cybersecurity insurance covers incident response, regulatory action, and legal proceedings subject to deductibles and limits.

  Item 1.05 view on EDGAR →