Rhode Island Data Breach: Social Services Cyberattack

Cyberattack Impacts Rhode Island Social Services Portal

Hundreds of thousands of Rhode Island citizens may be impacted by a recent cyberattack targeting the state's online system for social services. State officials have indicated a “high probability” of a breach involving personally identifiable information.

Attack on RIBridges and HealthSource RI

The cyberattack specifically targeted RIBridges, the platform utilized by Rhode Island residents for applications and access to programs like Medicaid and the Supplemental Nutrition Assistance Program (SNAP).

Furthermore, the HealthSource RI insurance marketplace was also compromised. Governor Dan McKee’s office stated that individuals who have applied for or received health coverage or human services benefits may be affected by this data leak.

Potentially Compromised Data

The data potentially accessed during the attack encompasses a range of sensitive details. This includes names, addresses, dates of birth, Social Security numbers, and even banking information.

Deloitte’s Response and System Shutdown

Deloitte operates the RIBridges system and initially alerted the state to a possible cyberattack on December 5th.

However, it wasn’t immediately apparent at that time whether sensitive data had actually been breached. On December 13th, Deloitte confirmed the presence of “malicious code” within the system.

Subsequently, Deloitte collaborated with the state to proactively shut down the system to mitigate the threat.

Alternative Application Methods

While the online system is unavailable, Rhode Island residents can continue to apply for benefits using paper applications. The state has made these forms accessible as an alternative.

Ransom Demand Reported

According to reports from The New York Times, Brian Tardiff, the state’s chief digital officer, revealed during a press conference that the cybercriminals responsible for the attack have demanded a payment.

They have threatened to release the stolen data if their ransom demands are not met.