RIBridges Data Breach: What You Need to Know
- By PurePrivacy
-
6 February 2025
-
13 mins read
On December 5, 2024, RIBridges, which manages Medicaid, HealthSource RI, SNAP, and other public health benefits, suffered a data breach that compromised 650,000 residents’ private data.
Names, emails, and SSNs of multiple Rhode Island citizens were stolen, and it seems to have been a ransomware attack. This blog provides detailed information about the breach, the data exposed, and recommended actions to help you stay safe.
What Happened in the RIBridges Data Breach?
Brain Cipher claimed responsibility for this ransomware attack when it breached RIBridges, managed by Deloitte, and stole the personal information of American citizens. The attack caused an outage of RI Bridge systems, stopping 2,000 residents from enrolling in state-paid healthcare. They asked for a ransom of $23 million to be paid via cryptocurrency.
Discover if Your Most Critical Identifiers Have Been Exposed on the Dark Web
Receive timely alerts and actionable insights with PurePrivacy's Dark Web Monitoring.
But unfortunately, Brian Cypher leaked all the stolen data on the dark web. Deloitte learned that private data had been leaked on the dark web, and they alerted RIBridges to restore the systems and start their investigations. Deloitte has agreed to pay $5 million to cover the unexpected expenses, according to Rhode Island Governor Dan MacKee.
The exposed data is as follows:
- Full names
- Social Security Numbers
- Mailing addresses
- Email addresses
- Phone numbers
What are the Risks of Exposed Data?
The following list shows possible risks associated with each category of exposed information:
- Full Names: Fraudsters may open multiple fake accounts, cause reputational damage, and apply for loans.
- Contact Information: Expect more phishing messages, spam calls, or physical threats like burglary.
- Social Security Numbers: High risk of identity theft, which can lead to fraudulently opened credit accounts, loans, and other financial activities.
- Addresses: These threats can include fraudulent change-of-address requests and potential home burglaries.
- Phone Numbers: There is a high likelihood of increased phishing attacks through text messages and phone calls, potentially resulting in unauthorized access to personal and financial information.
- Email addresses: Increased risk of targeted phishing, account takeovers, unauthorized access, and a higher chance of spam emails.
- Account Numbers: Strangers can drain your bank accounts, take over your account, and open credit lines under your name.
What Should I Do In Case of Data Breach?
As such, we recommend taking the following actions:
Full Names
- Be cautious of incoming spam calls, suspicious emails, and messages using your full name to impersonate you.
- Avoid sharing personal information online when using Facebook, Snapchat, Instagram, or Twitter.
Social Security Numbers
- Consider placing a credit freeze with the major credit bureaus to prevent identity theft.
- Check and review your credit report through the annual credit report.
- Place a fraud alert with the major credit bureaus: Transunion, Equifax, and Experian.
- If your SSN was compromised, contact the Social Security Administration.
- Monitor your bank and crypto accounts for suspicious activities.
Phone Numbers
- Stay alert for phishing attempts via texts and calls.
- Never share personal details with unknown contacts.
- Disregard messages from untrusted sources.
- Avoid clicking on links in unexpected text messages, regardless of the sender.
Email Addresses
- Use 2-factor authentication for all your accounts.
- Create strong, complex passwords for every email and bank account.
How to Minimize Damage in Case Data Breaches
You can’t stop an imminent ransomware attack because cybercriminals are always one step ahead of your security protocols and privacy measures. However, you can always be vigilant and reduce the damage. Instead of following manual protocols to protect your privacy, consider using an all-in-one privacy app, PurePrivacy, on your devices.
Frequently Asked Questions (FAQs)
-
Why did Deloitte pay $5 million?
Deloitte is the vendor responsible for handling RI Bridges systems, and now they have to pay for these damages and cover unexpected expenses resulting from the ransomware attack.
-
How did RI Bridges respond to the attack?
RI Bridges sent an email and notified all affected Rhode Island citizens to change their passwords and set up two-factor authentication. Once the stolen data is posted on the dark web, any malicious actor can buy and exploit it for fraudulent activities.
-
What were the consequences of the RI Bridges ransomware attack?
For nearly two months, 2,000 citizens couldn’t enroll in state-funded healthcare programs because Deloitte was working to repair the system and mitigate the damage.
Wrap Up
The attack on RI Bridges shows how vulnerable and attack-prone these state-funded systems are; your private data is always at risk of theft. To combat this issue, you should remain vigilant and smart. Consider using a privacy app that alerts you whenever your information is posted on the dark web so you can take action before it’s too late.
