Rhode Island Governor Dan McKee announced that the state has finalized a settlement agreement with Deloitte Consulting LLP related to the December 2024 cybersecurity incident that shuttered the state’s benefits administration site, RIBridges.
In February 2025, Deloitte, the services provider for the site, paid the state $5 million to compensate for the ransomware attack that forced the benefits site offline and exposed private information of some of the more that 650,000 people who use the system.
Under the terms of the final agreement, Deloitte has agreed to pay the state an additional $7 million, bringing the state’s total direct financial recovery from the services firm to $12 million.
Deloitte Pays Rhode Island $5 Million to Aid Recovery From Ransomware Attack
In 2025, Deloitte said it would also cover the cost of the data breach call center, credit monitoring, and identity protection for impacted customers.
McKee said Deloitte has also provided $6 million worth of system enhancements, operational support, and business continuity services that were outside the scope of its contract. McKee said the state said it will not incur additional charges for these services.
RI Ransomware Attack Update: Some Stolen Data Posted to Dark Web
Thomas Verdi, acting director of the Department of Administration, said the agreement ensures that the state receives “additional financial support while also capturing significant value in additional technological enhancements and operational support services during system restoration.”
As services provider for RIBridges, Deloitte faced several lawsuits alleging it had been negligent. Deloitte has denied any wrongdoing but agreed to a $6.3 million class action settlement, which a federal court approved in January 2026.
Deloitte has indicated the Brain Cipher international ransomware gang was behind the breach.
RIBridges provides access to Medicaid, Supplemental Nutrition Assistance Program, Temporary Assistance for Needy Families, Child Care Assistance Program, health coverage purchased through HealthSource RI, Rhode Island Works, Long-Term Services and Supports, and general public assistance programs.
Customers were unable to log into their accounts through the portal or the mobile app while the system was offline.
According to the state, the original $5 million payment was to help defray costs including those associated with the approximately 2,000 HealthSource RI customers who were enrolled directly in coverage for the months of January and February 2025.
Topics
Cyber
Interested in Cyber?
Get automatic alerts for this topic.
