RIBridges Data Breach Affects 650,000 Individuals

RIBridges, Rhode Island’s unified technology platform for administering public benefits, experienced a data breach impacting approximately 650,000 Rhode Island residents.

The incident, which was disclosed to the Rhode Island Attorney General’s office on Jan. 14, 2025, is among the largest breaches in the state’s history.

The breach occurred when the Brain Cipher threat group exploited credentials belonging to a Deloitte employee, gaining unauthorized access to the RIBridges system in July 2024. The cyberattack went undetected for several months and was only discovered after the hackers posted stolen data on a leak site in December 2024.

As a result, sensitive information was exposed, including names, Social Security numbers, account numbers, addresses, banking and financial information, dates of birth, driver’s license numbers, email addresses, phone numbers, as well as health and medical information.

RIBridges’s response

A $6.3 million settlement was reached to resolve a class action lawsuit brought by those affected. Impacted individuals are encouraged to monitor their financial accounts and credit reports closely, as the breach involved both financial and health information.

Individiuals who believe their data may have been compromised should consider placing fraud alerts or credit freezes with major credit bureaus and remain vigilant for suspicious activity.