RIBridges $6.3M Data Breach Class Action Settlement
Individuals residing in the United States who received a notice from the State of Rhode Island indicating their private information may have been impacted in a data breach, may be eligible to submit a claim for up to $5,000 and medical monitoring from a class action settlement. The cybersecurity incident affected 735, 501 individuals.
Deloitte Consulting LLP has agreed to pay $6.3 million to settle a class action lawsuit related to a data breach involving the Rhode Island RIBridges system. The class action claims that, on or about Dec. 5, 2024, cybercriminals unlawfully accessed personal information stored on the RIBridges system, including names, addresses, Social Security numbers, banking details, and health information.
Who is eligible for a RIBridges data breach payout?
Class members must meet the following criteria:
They are a living individual, residing in the United States.
They received a notice from the State of Rhode Island stating their private information may have been impacted by the Deloitte data breach.
How much will the settlement payment be?
Class members have the following benefit options:
Cash payment A – Documented losses: Class members can submit a claim for up to $5,000 in documented out-of-pocket losses traceable to the data breach. Documentation may include receipts, email correspondence, invoices for credit monitoring and identity protection and other third-party documents showing fraud or i
Source: https://www.claimdepot.com/settlements/ribridges-data-settlement
Castillo Sanchez & Burrell, LLP cybersecurity rating report: https://www.rankiteo.com/company/castillo-sanchez-&-burrell-llp
"id": "CAS1764641765",
"linkid": "castillo-sanchez-&-burrell-llp",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'incident': {'affected_entities': [{'customers_affected': '735,501 '
'individuals',
'industry': 'Professional Services',
'location': 'United States (RIBridges '
'system tied to Rhode Island)',
'name': 'Deloitte Consulting LLP',
'size': None,
'type': 'Consulting Firm'},
{'customers_affected': '735,501 '
'individuals',
'industry': 'Public Administration',
'location': 'Rhode Island, USA',
'name': 'State of Rhode Island (RIBridges '
'system)',
'size': None,
'type': 'Government Agency'}],
'customer_advisories': 'Eligible U.S. residents can submit '
'claims for up to $5,000 in documented '
'losses and medical monitoring.',
'data_breach': {'data_encryption': None,
'data_exfiltration': 'Yes (unlawful access '
'confirmed)',
'file_types_exposed': None,
'number_of_records_exposed': '735,501',
'personally_identifiable_information': ['Names',
'Addresses',
'Social '
'Security '
'numbers'],
'sensitivity_of_data': 'High (includes SSNs, '
'banking details, and '
'health info)',
'type_of_data_compromised': ['Personally '
'Identifiable '
'Information (PII)',
'Financial Data',
'Health '
'Information']},
'date_detected': '2024-12-05',
'description': 'A cybersecurity incident affected 735,501 '
'individuals in the Rhode Island RIBridges '
'system, managed by Deloitte Consulting LLP. '
'Cybercriminals unlawfully accessed personal '
'information, including names, addresses, Social '
'Security numbers, banking details, and health '
'information. Deloitte agreed to pay $6.3 million '
'to settle a class action lawsuit, with eligible '
'U.S. residents able to claim up to $5,000 for '
'documented losses and medical monitoring.',
'impact': {'brand_reputation_impact': 'Significant (class action '
'lawsuit and public '
'settlement)',
'conversion_rate_impact': None,
'customer_complaints': None,
'data_compromised': ['Names',
'Addresses',
'Social Security numbers',
'Banking details',
'Health information'],
'downtime': None,
'financial_loss': '$6.3 million (settlement amount)',
'identity_theft_risk': 'High (PII and financial data '
'exposed)',
'legal_liabilities': '$6.3 million settlement',
'operational_impact': None,
'payment_information_risk': 'High (banking details '
'exposed)',
'revenue_loss': None,
'systems_affected': ['RIBridges system']},
'initial_access_broker': {'backdoors_established': None,
'data_sold_on_dark_web': None,
'entry_point': None,
'high_value_targets': ['PII',
'Financial data',
'Health '
'records'],
'reconnaissance_period': None},
'investigation_status': 'Settled (class action lawsuit resolved '
'with $6.3M payout)',
'motivation': 'Unlawful access to personal information (likely '
'financial gain or data exploitation)',
'post_incident_analysis': {'corrective_actions': None,
'root_causes': None},
'ransomware': {'data_encryption': None,
'data_exfiltration': None,
'ransom_demanded': None,
'ransom_paid': None,
'ransomware_strain': None},
'references': [{'date_accessed': None,
'source': 'Class Action Settlement Notice '
'(RIBridges Data Breach)',
'url': None}],
'regulatory_compliance': {'fines_imposed': None,
'legal_actions': 'Class action lawsuit '
'settled for $6.3 '
'million',
'regulations_violated': None,
'regulatory_notifications': None},
'response': {'adaptive_behavioral_waf': None,
'communication_strategy': 'Notice sent to affected '
'individuals by the State '
'of Rhode Island',
'containment_measures': None,
'enhanced_monitoring': None,
'incident_response_plan_activated': None,
'law_enforcement_notified': None,
'network_segmentation': None,
'on_demand_scrubbing_services': None,
'recovery_measures': None,
'remediation_measures': None,
'third_party_assistance': None},
'stakeholder_advisories': 'Notice sent to 735,501 affected '
'individuals by the State of Rhode '
'Island',
'threat_actor': 'Cybercriminals',
'title': 'RIBridges $6.3M Data Breach Class Action Settlement',
'type': 'Data Breach'}}