Rhode Island was affected by a widespread  cyber incident

---

The State of Rhode Island has recently confirmed that its social services portal, the RIBridges system, has been subjected to a major security threat. This system, managed by the Rhode Island Department of Human Services (DHS), is crucial for residents to apply for and determine eligibility for various social services and benefits. Unfortunately, it appears that cybercriminals have likely accessed files containing personally identifiable information (PII) during this cyber-attack.

Overview of the Incident

• Affected System: The RIBridges portal, which is extensively used by Rhode Islanders to access social services.
• Vendor Notification: Deloitte, the vendor responsible for managing RIBridges, notified the state about the security threat on December 13, 2024.
• Compromised Data: The PII that may have been accessed includes names, addresses, dates of birth, Social Security numbers, and certain banking information.

Timeline of Events

1. December 5, 2024: Deloitte initially alerted the state to a potential cyber-attack on the RIBridges system.
2. December 10, 2024: Deloitte confirmed the breach following evidence provided by the hackers.
3. December 13, 2024: Deloitte formally notified the state about the significant security threat and the presence of malicious code within the system.
4. December 14, 2024: Governor Dan McKee conducted a media briefing to address the cybersecurity breach and its broader implications.

Impact of the Breach

• System Downtime: The RIBridges system has been taken offline temporarily to address the security threat and restore safe operations.
• Programs Affected: The breach affects several key social service programs, including Medicaid, SNAP, and the Child Care Assistance Program, among others.
• Potential Risks: Unauthorized access to PII can lead to identity theft, financial fraud, and other malicious activities.

Response and Mitigation Measures

• Delloite Response: In the wake of the attack, Delloite has engaged with Experian to set up a multilingual call center to support individuals affected by the breach.

Recommendations for Users:

1. Monitor Accounts: Individuals are advised to keep a close watch on their financial accounts for any suspicious activity.
2. Change Passwords: It is recommended that users change their passwords for added security.
3. Consider Credit Monitoring Services: Signing up for credit monitoring services can help detect fraudulent activities promptly.

Moving Forward

This incident underscores the importance of robust cybersecurity practices and regular system audits. Organizations should:

• Apply Security Patches: Ensure all systems are updated with the latest security patches to mitigate risks.
• Conduct Regular Security Audits: Regularly review and audit systems to promptly identify and address vulnerabilities.
• Implement Strong Security Measures: Strengthen security protocols such as multi-factor authentication, encryption, and regular backups to prevent unauthorized access.