{
  "type": "bundle",
  "id": "bundle--38213ae6-37e6-5618-8b34-ec014251d824",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--337cdd38-db18-558c-81bb-8ca8dfb407f0",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "org:54983416-7459-4867-8eba-70dbe4d6fa69",
      "name": "RCI Internet Services, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--ff37756f-f814-54d0-82af-53dc8f29d10a",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "org:277998fc-53f8-4234-b41c-f7733d971432",
      "name": "RCI Hospitality Holdings, Inc.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--8aaef11d-7001-5d62-8af7-7ee89a7fa9a7",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "brh:fc6f6fb4-ae31-4993-9061-4c2fa89067dd",
      "name": "RCI Internet Services contractor data breach"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--95c2637b-b78c-51e6-8ef3-8c2a879bbe55",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "inc:33e0d9fb-cd96-4d6d-afc8-910211d1c810",
      "name": "March 2026 RCI Internet Services cybersecurity incident"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--1c6930f6-9cb2-5ab8-8cce-58791fb8f733",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:a1622f07-b3a5-49ac-bf02-6de7fa23104f",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--5c9641cd-0e27-5cd7-8ce2-7d5698cadf85",
      "target_ref": "x-ally-data-category--a5875288-3af8-5021-801a-9ae62c23e6d2",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "RCI Internet Services, Inc.",
          "url": "https://oag.ca.gov/system/files/RCI%20Internet%20Services%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20%28CA%29_0.pdf",
          "external_id": "cit:83ab9e8a-7fb9-49e1-a3d0-989f71e0b8ba",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b04add37940da1e7a746ab65172a6cb17f1b141ac86892de2c7163842ef3ba5b"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--201a2d7c-a65c-5c6a-8a72-5259e1009d51",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:1ba1d66a-e74c-4144-870d-ae80deeffbb3",
      "relationship_type": "resulted-in",
      "source_ref": "incident--95c2637b-b78c-51e6-8ef3-8c2a879bbe55",
      "target_ref": "x-ally-event--28651775-10ab-5a60-877b-d3eff314f2c4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Internet Services, Inc.",
          "url": "https://oag.ca.gov/system/files/RCI%20Internet%20Services%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20%28CA%29_0.pdf",
          "external_id": "cit:62f9b9af-0c06-4439-9209-a4113e4102a1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b04add37940da1e7a746ab65172a6cb17f1b141ac86892de2c7163842ef3ba5b"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--567f1235-40d2-5ae9-879c-53365a3cbb13",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:c16363e0-1187-4e48-bcbb-0b69f17ac154",
      "relationship_type": "affected-organization",
      "source_ref": "incident--95c2637b-b78c-51e6-8ef3-8c2a879bbe55",
      "target_ref": "identity--337cdd38-db18-558c-81bb-8ca8dfb407f0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:e57b7e76-47ac-4f0c-a9f0-4f9255fe4ee7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7d9cd79e-41c5-58f0-8858-03b7e0af134a",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:de720745-adc5-472f-9beb-7cfa7430c4cc",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--5c9641cd-0e27-5cd7-8ce2-7d5698cadf85",
      "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:a46ba9d3-b910-4c08-9ff1-6dcee28916a2",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7ed3d1d1-986e-50ac-8df7-6ea5e434f528",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:a4a59c84-01b6-4f0d-8148-4f1fdec9f3be",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--5c9641cd-0e27-5cd7-8ce2-7d5698cadf85",
      "target_ref": "x-ally-data-category--0e475596-55d5-5383-86b9-9e5074f2a0ed",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:74cdb725-8e41-48b2-b14f-927fb6d9b168",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--840789e1-d905-5054-8e15-f5b321eaa13a",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:2eb9a6f2-d2c5-4830-9648-8d7d704799b1",
      "relationship_type": "subsidiary-of",
      "source_ref": "identity--337cdd38-db18-558c-81bb-8ca8dfb407f0",
      "target_ref": "identity--ff37756f-f814-54d0-82af-53dc8f29d10a",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:c769cd24-e07b-4eb9-874f-8edbfa2604b5",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--97c4b616-c0d2-5fc4-8ace-baf2db03c0c8",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:8301ea72-d8f9-4743-b9b9-d1b514cf9ca0",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--5c9641cd-0e27-5cd7-8ce2-7d5698cadf85",
      "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:91753375-a88d-4164-8e55-fdb604c367a7",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--b29aac56-3de1-5ccd-88a5-d6e65d172f7c",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:c6e8e01c-6112-4d1e-92c1-3a73e028684a",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--5c9641cd-0e27-5cd7-8ce2-7d5698cadf85",
      "target_ref": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:cfd3021b-9be4-4bea-806a-9532b64ec965",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--c39a889d-7fb8-55af-8557-e1c0e9f310e1",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:6301f528-312e-4ca9-a354-a458a29de4da",
      "relationship_type": "resulted-in",
      "source_ref": "incident--95c2637b-b78c-51e6-8ef3-8c2a879bbe55",
      "target_ref": "x-ally-event--b68e9d06-d48a-534f-89a0-86eac42a7f23",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:74d5cbd7-7da1-42d0-86b2-1b6f6ebdba01",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--dd6a9f3a-f5ca-5b82-80b7-2c29a7bbeece",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:799728d3-020d-4af9-a0d1-e2da6b35a42a",
      "relationship_type": "resulted-in",
      "source_ref": "incident--95c2637b-b78c-51e6-8ef3-8c2a879bbe55",
      "target_ref": "x-ally-data-exposure--5c9641cd-0e27-5cd7-8ce2-7d5698cadf85",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:a3ea4aaf-004a-4ba0-9246-3daf51fb8976",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--eb6a58cb-e4ac-538e-878d-b49c1baed50c",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:44dd68b3-2ffa-4f49-872f-e8c374303c6a",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--5c9641cd-0e27-5cd7-8ce2-7d5698cadf85",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 90,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:d30ec3b0-64e4-4da9-bc9c-1814f0ee6bc6",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--fbfceea1-6004-5d12-86ed-dd90cb1b5eb6",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:b796764d-27b0-495d-9f30-4255d96432ac",
      "relationship_type": "resulted-in",
      "source_ref": "incident--95c2637b-b78c-51e6-8ef3-8c2a879bbe55",
      "target_ref": "x-ally-notification--8423daad-b223-5248-8ce5-96849461dd6d",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Internet Services, Inc.",
          "url": "https://oag.ca.gov/system/files/RCI%20Internet%20Services%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20%28CA%29_0.pdf",
          "external_id": "cit:82e5c9ce-37ac-4158-853f-0ba019ee4fae",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b04add37940da1e7a746ab65172a6cb17f1b141ac86892de2c7163842ef3ba5b"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1453b29a-ddb5-5837-8f46-ecc4598fd834",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:c04d6fb2-5a29-45fd-8b71-89b2aa24870f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:1f004433-e6b8-49ea-beb9-e58262a65022",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "RCI Hospitality reported that the incident did not affect company business operations and was not expected to have a material adverse operational effect."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1d77e873-8997-508e-8f1e-549b51b7d6cd",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:de23dbb6-7f9b-444b-a860-4e5e03c113f7",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:5b2574d0-5fa6-407b-a540-f809e8713d19",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Personal information concerning numerous independent contractors was accessed without authorization."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--3fbcd050-7e42-535a-8527-0ed47d63711f",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:20d55fa3-d7c6-4c9b-a1df-1d74af4c0df2",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:e08c3bb7-d071-4a67-9b29-cfa687d04141",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-04-07"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--567d2810-e67a-530e-8f26-a55bbfbd3d7f",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:f431289c-41d0-46cc-ac24-ec7b1cb81389",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:12a7e65e-595f-403a-a973-dc8a188fbb4c",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-03-23"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--71817ce1-e578-5546-8355-98e2edfd1099",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:c5cf7bc5-fe5e-4ecc-8c54-266996ec8147",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Internet Services, Inc.",
          "url": "https://oag.ca.gov/system/files/RCI%20Internet%20Services%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20%28CA%29_0.pdf",
          "external_id": "cit:68afb000-0c7e-4022-8a11-d2694ad17c30",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b04add37940da1e7a746ab65172a6cb17f1b141ac86892de2c7163842ef3ba5b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-13"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--7899642d-a7ed-5c9e-81fe-6e33f858ac04",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:3ee30de6-dd52-4356-9d6d-c7284ad45533",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:fcaf07ad-1c5a-4c8a-8d38-e4d2a3f04809",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "RCI Hospitality reported learning that a potential insecure direct object reference vulnerability was present on the subsidiary's Internet Information Services web server."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--92519bc5-2ddd-5c29-89d0-fd5f7dd1f3f7",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:e9744262-b715-4f12-943a-f3b6d9f3be27",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Internet Services, Inc.",
          "url": "https://oag.ca.gov/system/files/RCI%20Internet%20Services%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20%28CA%29_0.pdf",
          "external_id": "cit:22acf913-d4a7-408a-afa8-ad23880a474b",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b04add37940da1e7a746ab65172a6cb17f1b141ac86892de2c7163842ef3ba5b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-05-28"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a22ef305-a8eb-5d40-8239-7e28bfa3a16c",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:429d5d64-5c4b-4898-a4c2-6c53845389d4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Massachusetts Office of Consumer Affairs and Business Regulation",
          "url": "https://www.mass.gov/doc/data-breach-report-2026/download",
          "external_id": "cit:af6e325b-228d-4cbe-a275-97eee27aac9f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:5ead3dc85287618c6b9134045436f1f50cac56d0d4e0fe84d26ddf15bb97cbd4"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "integer",
        "value": 201,
        "unit": "individual"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a2e0f123-3255-571d-8dc7-c6bb9d4b0d83",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:b2b31d1c-2754-47d3-adc0-b09b64f6d88b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:dd7d8957-d432-4d16-9072-0e2fa89b87fc",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-03-19"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--ae7a9f73-6da8-55f2-8771-3f3fda297b34",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:e89fc4a0-76f4-4d61-974d-2ea34a8bd710",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:875284d9-4001-4e48-8aab-2799ed2b00ae",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "RCI reported engaging third-party cybersecurity firms, expanding multifactor authentication, disabling external IIS access, notifying the FBI, and offering identity-protection services through IDX."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bcff3120-f632-5a64-8783-678213a023d2",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:7792c870-8c90-4e67-b3bd-f9856cd127ae",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Internet Services, Inc.",
          "url": "https://oag.ca.gov/system/files/RCI%20Internet%20Services%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20%28CA%29_0.pdf",
          "external_id": "cit:3427966c-d33d-46b4-b596-a418a790e770",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b04add37940da1e7a746ab65172a6cb17f1b141ac86892de2c7163842ef3ba5b"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "RCI confirmed that the notification recipient's personal information was contained in the potentially affected files."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--cb2986e8-e9b4-5398-88b1-3fd73e0369e5",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:8fa426f6-4b3a-4d28-82f4-e56c0447c48b",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:05bdf994-7cfc-4a78-96dc-5004b53da0c1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "RCI Hospitality reported that no customer information or financial systems were accessed."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--f3b4ed51-e5ee-5bb8-8a4e-7082e5261e6b",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "clm:3e1364de-ae1a-4e2a-ab77-18f5fca39886",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "RCI Internet Services, Inc.",
          "url": "https://oag.ca.gov/system/files/RCI%20Internet%20Services%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20%28CA%29_0.pdf",
          "external_id": "cit:e2eb1ec6-e344-49cc-9c6d-b54e44073163",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:b04add37940da1e7a746ab65172a6cb17f1b141ac86892de2c7163842ef3ba5b"
        },
        {
          "source_name": "RCI Hospitality Holdings, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/935419/000162828026024806/rick-20260407.htm",
          "external_id": "cit:d2799f40-776d-4d78-b67f-6500065d105a",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:3810aea5e25793d8afd4228e9f4b64cad48ebe36eb28b9e309b3f0f8e088a18f"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "RCI reported no evidence of misuse or attempted misuse in its May 28 notice, while its earlier SEC filing said the unauthorized actor had not publicly disseminated the data to the company's knowledge."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--0e475596-55d5-5383-86b9-9e5074f2a0ed",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "dat:6dfe9275-03bf-4617-8a72-2c61a08bcffc",
      "name": "Driver's license numbers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a5875288-3af8-5021-801a-9ae62c23e6d2",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "dat:f6504134-e597-4f8c-802b-087547d02511",
      "name": "Passport numbers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:fcd11f98-14a8-47ac-adea-68ad2985528f",
      "name": "Social Security numbers"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9",
      "name": "Contact information"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68",
      "name": "Dates of birth"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--5c9641cd-0e27-5cd7-8ce2-7d5698cadf85",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "exp:29e01f6e-fa4e-48d9-b01b-399d8db12dd7",
      "name": "RCI independent-contractor personal data exposure"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--28651775-10ab-5a60-877b-d3eff314f2c4",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "evt:a3fdabb3-e127-4c71-b05b-b78d671e0cd7",
      "name": "RCI confirms personal information in affected files"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--b68e9d06-d48a-534f-89a0-86eac42a7f23",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "evt:74eb7bad-b8a4-4372-9965-78bbe671f445",
      "name": "RCI investigation concludes"
    },
    {
      "type": "x-ally-jurisdiction",
      "spec_version": "2.1",
      "id": "x-ally-jurisdiction--26a2a0d1-6423-54e9-8580-cb98986f2041",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "jur:baa42ab9-8b9f-4a7a-b8aa-b1fe626969ce",
      "name": "Massachusetts"
    },
    {
      "type": "x-ally-notification",
      "spec_version": "2.1",
      "id": "x-ally-notification--8423daad-b223-5248-8ce5-96849461dd6d",
      "created": "2026-08-08T23:32:54Z",
      "modified": "2026-08-08T23:32:54Z",
      "x_ally_original_id": "ntf:d73a2d7d-b05e-4aed-b9c8-b963517b7b52",
      "name": "RCI affected-individual notification"
    }
  ]
}