Rhode Island Finalizes $12 Million Settlement with Deloitte Over 2024 Ransomware Attack
Rhode Island Governor Dan McKee announced the finalization of a settlement agreement with Deloitte Consulting LLP concerning a cybersecurity incident that occurred in December 2024. This incident involved a ransomware attack that shut down the state's benefits administration site, RIBridges, affecting over 650,000 users. Initially, Deloitte paid $5 million in February 2025 to compensate for the breach, which exposed private information. Under the new agreement, Deloitte will pay an additional $7 million, bringing the total financial recovery for the state to $12 million. Additionally, Deloitte has committed to covering costs related to a data breach call center, credit monitoring, and identity protection for affected customers. The company has also provided $6 million worth of system enhancements and operational support, which were not part of their original contract. 
