Rhode Island Breach Fallout
Coverage from Gonzales Inquirer, News From The States, and others

Rhode Island is addressing the fallout from major breaches affecting public-benefits and insurance-related systems.
The state finalized a settlement with Deloitte over the December 2024 RIBridges ransomware attack, securing $12 million in direct payments and $6 million in technology and operational support, while portions of the recovery are being directed to public services. Separately, Beacon Mutual reported that a January 2026 ransomware attack potentially exposed sensitive information belonging to about 132,000 Rhode Islanders, including current and former state employees.
The main update is that the Deloitte settlement is now described as finalized with specific payment and support terms, and Rhode Island has begun directing some proceeds to public-service uses. The Beacon Mutual incident also gained a more concrete attribution and scale, with INC Ransom claiming responsibility and alleging 275 GB of stolen data.
The main update is a reframing of the RIBridges outcome: the settlement is now described as accompanied by continued restoration support and a larger, more explicit claim of data exposure. The Beacon incident is also tightened into the same broader enforcement-and-litigation narrative, with consumer notifications and regulatory actions emphasized.
- More than 644,000 people were reportedly exposed in the RIBridges breach.
- Reported RIBridges exposure totals vary across accounts.
- Regulatory notifications were added to the response measures.
- Dan McKee is now explicitly named in the story framing.
- Settlement proceeds may support other healthcare initiatives beyond Newport Hospital.
The story has broadened from a single Deloitte settlement over RIBridges into a larger ransomware and data-exposure narrative that now includes Beacon Mutual and additional litigation. It also adds a new policy angle: Rhode Island is considering directing settlement proceeds to specific healthcare uses.
- Beacon Mutual reported a January 2026 ransomware attack.
- About 132,000 Rhode Islanders may have had data exposed.
- A federal class-action settlement and a Superior Court case are now part of the story.
- Rhode Island proposed $1.6 million for Newport Hospital’s birthing center.
- INC Ransom was identified as the claimed attacker in the Beacon incident.
Rhode Island has finalized a settlement with Deloitte over the 2024 RIBridges cyberattack that disrupted the state’s benefits platform and exposed personal data. The agreement adds $7 million to an earlier $5 million payment, bringing direct cash recovery to $12 million, while also requiring Deloitte to cover response costs and provide $6 million in system support and enhancements. The settlement matters because it helps fund recovery from a breach that affected a large share of residents who rely on Medicaid, SNAP, child care, and other assistance programs.
