Rhode Island Warns of Data Leak Following Ransomware Attack as Deloitte Works to Restore Systems

Rhode Island officials have confirmed that cybercriminals have leaked data stolen during a ransomware attack on several state systems last month. The breach, which targeted platforms managed by the state’s health and social services, saw sensitive files released onto the dark web by the attackers.

Deloitte, the consulting firm responsible for the state’s HealthSource RI and RIBridges systems, confirmed that the leaked data includes personal information of an estimated 650,000 individuals. The files potentially contain names, addresses, Social Security numbers, and banking details. While the state has been working with Deloitte to assess the full extent of the breach, it has urged those impacted to take swift action to secure their information.

Governor Dan McKee recommended that individuals freeze their credit, request fraud alerts, and enable multifactor authentication on financial accounts. He also highlighted the need for parents to monitor their children’s credit. “We must act quickly to protect our personal data,” McKee said.

The attack was claimed by the Brain Cipher ransomware group, which had initially misled the state about the nature of the breach. While Deloitte denied being directly targeted, it was later revealed that the systems the company built for Rhode Island were the focus of the cyberattack.

As a result of the breach, state services, particularly the RIBridges system used for vital social programmes, remain disrupted. Although HealthSource RI has resumed operations, those needing assistance with RIBridges must visit state offices or call for support. The state is extending call centre hours to help residents navigate the fallout from the attack.