Rhode Island Breach Fallout
Coverage from Gonzales Inquirer, News From The States, and others

Rhode Island is addressing the fallout from major breaches affecting public-benefits and insurance-related systems.
The state finalized a settlement with Deloitte over the December 2024 RIBridges ransomware attack, securing $12 million in direct payments and $6 million in technology and operational support, while portions of the recovery are being directed to public services. Separately, Beacon Mutual reported that a January 2026 ransomware attack potentially exposed sensitive information belonging to about 132,000 Rhode Islanders, including current and former state employees.
The main update is that the Deloitte settlement is now described as finalized with specific payment and support terms, and Rhode Island has begun directing some proceeds to public-service uses. The Beacon Mutual incident also gained a more concrete attribution and scale, with INC Ransom claiming responsibility and alleging 275 GB of stolen data.
The main update is a reframing of the RIBridges outcome: the settlement is now described as accompanied by continued restoration support and a larger, more explicit claim of data exposure. The Beacon incident is also tightened into the same broader enforcement-and-litigation narrative, with consumer notifications and regulatory actions emphasized.
