RIBridges breach forces Rhode Island benefits system offline for more than a month

Rhode Island was notified on 05/12/2024 of suspicious activity in the Deloitte-managed RIBridges environment, later confirmed as a breach. Subsequent investigation found unauthorized use of Deloitte credentials, access to multiple systems and exfiltration of files. The State took RIBridges offline on 13/12/2024; customers could not access the portal or mobile app, and only a limited phased relaunch began in late January 2025, materially interrupting digital delivery of health and human-services benefits.