Hackers release files stolen in cyberattack on Rhode Island benefits system

Cybercriminals who launched a cyberattack last month on Rhode Island’s system for health and benefits programs have released files to a site on the dark web, according to a news release from Gov. Dan McKee’s office.

The statement indicated that state officials had been expecting the hackers to publish the stolen files from RIBridges to the dark web — a hidden part of the internet that allows users to hide their identity and location — if their ransom demands were not met. 

In preparation for the release of those files, the Department of Administration launched a statewide outreach campaign in December outlining ways for Rhode Islanders potentially impacted by the Dec. 5 cyberattack to protect their personal information, such as implementing multifactor authentication, credit monitoring, and signing up for fraud alerts.

“Deloitte has informed us that the cybercriminal released at least some RIBridges files to a site on the dark web,” the Monday release stated. “This is a complex process and we do not yet know the scope of the data that is included in those files, but as we’ve been saying for several weeks, we should assume that data contained in the RIBridges system has been compromised.” 

On Dec. 5, the state was informed by Deloitte, its IT vendor, that there was a major security threat to the RIBridges system, which was confirmed as ransomware attack on Dec. 10. 

The attack may have impacted several state benefits programs, including Medicaid, Supplemental Nutrition Assistance Program, Temporary Assistance for Needy Families, Child Care Assistance Program, health coverage purchased through HealthSource RI, Rhode Island Works, Long-Term Services and Supports, General Public Assistance and Program At HOME Cost Share.

The state’s IT teams are currently working to analyze the files released by the hackers as well as generating a list of impacted individuals.

According to Rhode Island’s Office of Health and Human Services, the department each year serves more than 300,000 Rhode Islanders, including adults, children, senior citizens, individuals with disabilities and veterans. The benefits programs account for more than 40% of the annual state budget, roughly $3.1 billion. 

“We understand that this situation is concerning, and we appreciate Rhode Islanders’ patience as we continue to navigate this challenge together,” the release stated.