Nightclub Giant RCI Says Data Breach Affects 40,000 Individuals
Data Breaches
The company detected a network intrusion in March and an investigation showed that some files were stolen during the attack.
Adult nightclub giant RCI Hospitality Holdings has informed authorities that a data breach disclosed in April affects roughly 40,000 individuals.
RCI Hospitality is one of the largest adult nightclub operators in the United States, and its portfolio also includes sports bars and dance clubs.
The company told the SEC in mid-April that its RCI Internet Services subsidiary discovered an insecure direct object reference (IDOR) vulnerability on March 23 in an IIS web server, allowing unauthorized access to personal information.
IDOR vulnerabilities can be exploited by an attacker to access data by changing a value in a URL or a request. For instance, a user logged into ‘account=101’ can change the URL to ‘account=102’ and access another user’s private information.
RCI said at the time that the information...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
