RCI Hospitality discloses cybersecurity incident; contractor PII accessed, no customer data breached

RCI HOSPITALITY HOLDINGS, INC.

Incident began March 19, 2026, discovered March 23; investigation concluded April 7.
Personal info of independent contractors (names, DOB, SSN, DL#) accessed via IIS vulnerability.
No customer or financial system access; data not publicly disseminated.
Company enhanced security (MFA, disabled external IIS access) and has cyber insurance.
Company believes incident will not have a material adverse effect on business operations.

This headline and bullets were generated automatically by deepseek-v4-flash:cloud@v2 from the public filing. Read the source on SEC.gov before relying on any specific claim. Not investment advice. See methodology for how this pipeline works.