22 Jan 2025

Rhode Island Data Breach: Citizens' Information Exposed on the Dark Web

Rhode Island officials have confirmed that cybercriminals have leaked personal data belonging to state residents on the dark web.

The breach stems from a December 2024 incident involving the RIBridges system, a social services portal managed by Deloitte.

Governor Dan McKee disclosed on December 30 that the state had been preparing for this possibility after learning that files containing personally identifiable information (PII) had likely been stolen. Efforts are underway to analyze the leaked data, though the full extent of the breach remains unclear.

The Rhode Island Department of Human Services (DHS) has warned that anyone who has applied for health or human services benefits could be affected. Citizens are urged to protect their financial information, monitor credit, and remain vigilant against potential social engineering attacks.

The ransomware group Brain Cipher is suspected of orchestrating the attack, claiming responsibility for stealing 1TB of data from Deloitte. Investigation and mitigation efforts continue.

Read full article here