What Happened in the RCI Internet Services Data Breach?
RCI Internet Services, Inc. recently filed a formal data breach notification with the Vermont Attorney General’s office. This filing confirms that sensitive personal information belonging to certain individuals was compromised. The RCI Internet Services data breach involved highly sensitive records, including Social Security numbers and government ID numbers.
The public filing does not specify the exact method attackers used to gain access. It also does not state when the intrusion itself first occurred. However, the notification to Vermont’s Attorney General indicates the company became aware of the exposure and moved to comply with state breach notification laws.
Because the filing is brief, many details remain unclear at this time. For example, the company has not publicly disclosed how the breach was discovered or which forensic steps followed. As more information becomes available, affected individuals should watch for updates from the company directly.
Who was affected?
The notification does not state a specific number of affected individuals. As a result, the full scope of the RCI Internet Services data breach has not been publicly disclosed. Given the nature of the exposed data, however, the incident likely affects customers, users, or account holders connected to the company’s services.
It also remains unclear whether employees, contractors, or minors are among those affected. In addition, the filing does not clarify whether the exposure was limited to Vermont residents or extended nationwide. Because RCI Internet Services filed with a state attorney general, though, it is reasonable to assume individuals across multiple states could be impacted.
What Information Was Potentially Exposed?
According to the breach notification, two categories of sensitive personal data were involved. These categories represent some of the most valuable information to identity thieves. Below is a summary of what was confirmed as exposed.
- Social Security numbers
- Government ID numbers
This combination of data creates serious risk for affected individuals. Social Security numbers are often described as the master key to a person’s financial identity. When combined with a government ID number, such as a driver’s license or state identification number, criminals gain nearly everything needed to open new accounts in someone else’s name.
As a result, victims of this type of exposure face heightened risk of identity theft, tax fraud, and unauthorized loan or credit applications. Criminals can also use stolen ID numbers to create fraudulent identification documents. Because these two data types rarely change, the risk to victims can persist for years rather than fading quickly.
What is the company doing?
RCI Internet Services took the required step of notifying the Vermont Attorney General about the breach. This filing shows the company is acknowledging its legal obligations under state breach notification laws. Typically, this type of filing also means the company is notifying directly affected individuals by mail or another required method.
Beyond the filing itself, the public record does not detail additional remediation steps. It is not yet clear whether RCI Internet Services is offering credit monitoring or identity protection services to those affected. Individuals who receive a notification letter should read it carefully, since it may include specific details about available support or protective services not reflected in the public filing.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Anyone potentially affected by the RCI Internet Services data breach should begin monitoring their credit reports right away. You can request free credit reports from all three major credit bureaus. Reviewing these reports regularly helps you catch suspicious activity early.
Look specifically for new accounts you did not open, unfamiliar inquiries, or unexpected changes to your credit limit. Because identity thieves sometimes wait months before using stolen data, ongoing vigilance matters more than a single check. Setting a recurring reminder every few months can help you stay consistent.
Consider a Credit Freeze or Fraud Alert
Since Social Security numbers and government ID numbers were exposed, a credit freeze offers strong protection. A freeze blocks new creditors from accessing your credit file, which makes it much harder for criminals to open accounts in your name. You can request a freeze directly through each credit bureau at no cost.
Alternatively, a fraud alert requires lenders to verify your identity before extending credit. This option is less restrictive than a freeze but still adds a meaningful layer of protection. Given the sensitivity of the exposed data, many security experts recommend a freeze rather than an alert alone.
Watch for Phishing Attempts
After a breach involving this kind of data, scammers often follow up with phishing emails, texts, or phone calls. These messages may pretend to be from RCI Internet Services, a bank, or a government agency. Because scammers now have real personal details, their messages can appear more convincing than usual.
Never click on links or provide personal information in response to unsolicited messages. Instead, contact the organization directly using a verified phone number or website. This simple habit can prevent you from falling victim to a secondary scam tied to this breach.
Protect Your Government-Issued Identification
Because government ID numbers were exposed, consider contacting your state’s motor vehicle agency or ID-issuing authority. Some states allow you to flag your record for potential fraud or request a new ID number in serious cases. This step can help prevent criminals from using your identification to open fraudulent accounts.
In addition, be cautious if you’re asked to verify your identity using your existing ID number. Whenever possible, use alternative verification methods. This reduces the chance that a compromised number can be reused against you in the future.
Consult a Data Breach Attorney
If you received a notification letter about this breach, it may be worth speaking with a data breach attorney. An attorney can help you understand whether you qualify for compensation through a class action or individual claim. Many offer free consultations, so there is little downside to asking questions.
Because laws around data breach claims can involve strict deadlines, acting sooner rather than later is wise. An attorney can also help you understand your specific state’s protections. This is especially useful given that breach notification laws vary from state to state.
More Information
Official data breach notification from Vermont Attorney General