---

Hundreds of thousands of Rhode Island residents have had their data stolen in a cyberattack on the state government’s RI Bridges system, an online portal used by state residents to obtain social services and health insurance. A potential breach of the system was identified by vendor Deloitte on December 5, 2024, exposing sensitive personal information like Social Security numbers, addresses, and financial details. The breach underscores growing vulnerabilities in public systems managing critical data.

The RI Bridges system, which supports Medicaid, SNAP, and other assistance programs, was the target of a sophisticated cyberattack. Managed by Deloitte, the system plays a crucial role in providing essential services to Rhode Island’s most vulnerable populations. Initial investigations suggest the breach was part of a broader attempt to exploit under-secured state IT infrastructure. Although the full scale of the breach is still under review, early estimates indicate that hundreds of thousands of individuals may have been affected.

Impact on Rhode Island Residents

The RI Bridges system provides access to essential programs, including:

• Medicaid: Offering healthcare coverage to low-income individuals and families.
• SNAP (Supplemental Nutrition Assistance Program): Ensuring food assistance for eligible residents.
• Child Care Assistance Program: Supporting affordable childcare for working families.

The breach’s impact is particularly concerning given the vulnerable populations these programs serve. Residents may now face increased risks of identity theft, fraud, and other cybercrimes.

Government and Deloitte’s Response

Rhode Island officials and Deloitte have mobilized response efforts, including:

1. Comprehensive Investigation: Cybersecurity teams are analyzing the breach to determine its cause and extent.
2. Resident Notifications: Letters and emails are being sent to affected individuals with detailed instructions.
3. Support Services: Impacted residents are being offered free credit monitoring and identity theft protection.
4. System Security Enhancements: Measures to improve the system’s defenses against future attacks are underway.

However, critics argue that Deloitte, which holds a significant contract to manage the RI Bridges system, failed to implement adequate preventative measures. Lawmakers are demanding an independent audit to evaluate how the breach occurred and ensure accountability.

Cyberattacks on Public Systems

Rhode Island’s data breach reflects a troubling rise in cyberattacks targeting public benefits systems. Public infrastructure is often underfunded and lacks the robust security measures necessary to defend against modern threats. According to a recent report by IBM Security, the average time to identify and contain a public-sector breach was 287 days in 2023, leaving sensitive data exposed for long periods.

Other states have faced similar incidents, underscoring the need for comprehensive cybersecurity upgrades nationwide. Without these investments, systems like RI Bridges will remain easy targets for hackers, putting residents’ personal data at risk.

Steps for Affected Residents

If you believe your information may have been exposed in the RI Bridges breach, consider taking these steps:

1. Monitor Financial Accounts: Regularly check bank and credit card statements for unauthorized transactions.
2. Set Up Fraud Alerts: Contact credit bureaus to flag your accounts for suspicious activity.
3. Freeze Your Credit: Prevent new credit accounts from being opened in your name.
4. Use Identity Theft Protection: Take advantage of the free services offered by Deloitte and Rhode Island.
5. Report Fraud: File reports with the Federal Trade Commission (FTC) if you detect suspicious activity.

The RI Bridges hack serves as a wake-up call for governments to prioritize cybersecurity in public systems. As digital tools become increasingly central to service delivery, their protection must keep pace. This breach highlights the human cost of inadequate safeguards and the urgent need for proactive measures to protect sensitive data. Moving forward, Rhode Island and other states must not only recover from this attack but also invest in long-term solutions to prevent future breaches.

Sources

Below are links to referenced information:

---