Files transferred from system to hackers over four months in RIBridges cyber attack

PROVIDENCE, R.I. (WLNE) — Governor Dan McKee’s administration is confirming approximately 640,000 residents’ personal information is at risk due to the RIBridges cyber attack that was first reported in December of 2024.

The administration has also learned more about how the hacker, Brain Cipher, was able to access the RIBridges system.

CrowdStrike conducted an independent analysis on the breach, and determined that hackers first accessed the Deloitte-run system in July of 2024 using a Deloitte account.

Large files of personal information were transferred over four months, and CrowdStrike said the last known access hackers had to the RIBridges system was on November 28, 2024.

According to Chief Digital Officer Brian Tardiff, Deloitte was unaware of the breach until the hackers contacted them in early December.

It wasn’t until December 13 that Deloitte pinpointed which of their systems was impacted.

Tardiff said the exact information taken from residents on the RIBridges system is not known, but they believe it’s all on the dark web.

Officials said the most vulnerable information residents need to watch out for is their Social Security, which includes Social Security numbers, names and addresses.

Anyone who may have had their personal data stolen should have received a letter with an activation code for free credit monitoring services.

The deadline to sign up is August 31, and the service is available to adults and minors for the next five years.

If a minor turns 18 during those five years, they’ll have to re-apply.

Governor McKee said the state is in the process of transferring to a new vendor to manage the RIBridges system, but that process could take one to two years.

The system can’t be immediately switched without disrupting benefits to residents.

McKee noted Deloitte representatives were invited to Thursday’s press conference, but declined.

Back in February, Deloitte announced it was providing $5 million to Rhode Island to pay for expenses related to the breach.