Class-action lawsuit against Deloitte for cyberattack on RIBridges
Rhode Islanders affected by a cyberattack on the state’s public benefits system have taken legal action against Deloitte Consulting, the company responsible for managing the system. The lawsuits, filed in US District Court in Rhode Island and the Southern District of New York, come on the heels of Governor Daniel J. McKee’s announcement that the RIBridges benefits system, which handles applications for food stamps, health insurance, and Medicaid, was compromised.
State officials have shut down the RIBridges system, now known as UHIP, as they work to protect the personal data of those impacted by the breach. A new call center has been set up to assist those affected, and a hotline (833-918-6603) is open Monday through Friday from 9 a.m. to 9 p.m. ET.
Deloitte confirmed the cyberattack and is now investigating the situation. The group responsible for the attack, Brain Cipher, claims to have one terabyte of data. The public was not informed of the breach until December 13, prompting questions about the delay in disclosure.
Personal information, including Social Security numbers, financial data, medical information, and more, was compromised in the attack. Deloitte and state officials have not disclosed what Brain Cipher demanded in ransom. Attorney General Peter Neronha has indicated that the state is ready to take legal action against Deloitte to ensure accountability for the breach.
Providence lawyer Peter N. Wasylyk, representing affected Rhode Islanders, stated that data breaches have a significant impact, causing stress, financial strain, and putting individuals at risk of identity theft. The lawsuits against Deloitte seek compensatory damages, reimbursement of costs, and injunctive relief for those affected by the breach.
