Connect with us

Rhode Island

Hackers worked undetected in RI’s benefits system for months before being found. What we know.

Published

on

Hackers worked undetected in RI’s benefits system for months before being found. What we know.


play

Advertisement
  • Cybersecurity firm Crowdstrike was unable to determine how Brain Cipher stole the credentials of a Deloitte employee
  • Around 115,000 people whose data was believed to be stolen last year, and received state warning letters were probably not exposed, but 107,000 weren’t warned may have had data stolen
  • Attorney General Peter Neronha is investigating whether the state will sue Deloitte

Hackers infiltrated Rhode Island’s public benefits portal in early July 2024, five months before the state was alerted about the attack and eventually shut the system down, according to findings from an investigation of the breach.

The hack resulted in the personal data of 644,000 Rhode Islanders being posted on the dark web, slightly fewer than the 650,000 initially estimated to be affected.

How did hackers get into the RIBridges system?

The group Brain Cipher gained access to the RIBridges computer network on July 2 of 2024 by getting the credentials of an employee of Deloitte, the contractor that runs the system for the state, the report from cybersecurity firm Crowdstrike said.

Crowdstrike was not able to determine how Brain Cipher got the Deloitte employee’s credentials.

Once inside the RIBridges system, the hackers worked undetected by Deloitte until early December, when the hackers contacted the information technology vendor and threatened to release personal information downloaded from the system.

Advertisement

Between November 11 and Nov. 28 of last year, Brain Cipher transferred large amounts of data from the RI Bridges system. After the hackers contacted Deloitte, the vendor told state officials about the hack on Dec. 4 and the system was shut down on Dec. 13.

RI in the early states of replacing, possibly suing, Deloitte

Gov. Dan McKee told reporters Thursday that Attorney General Peter Neronha’s office is now looking into a possible state lawsuit against Deloitte for failure to adequately protect resident data.

“Well, obviously we’re not pleased by it and we’re acting accordingly,” McKee said at a State House news conference. “That’s why the attorney general is looking into the implications there. I can say that under the circumstances … that this would be undetected for that period of time is something that is just unacceptable.”

The state is in the early stages of seeking proposals from vendors to replace Deloitte and the system, also known as the Unified Health Infrastructure Project, that has had numerous problems since it launched in 2016.

Advertisement

People who thought they were in the clear may have had their data stolen

The composition of the people whose data was stolen has also changed from last December when the system was shut down.

Around 115,000 people whose data was believed to be stolen last year, and received state warning letters, were probably in the clear, state Chief Digital Officer Brian Tardiff said.

On the flip side, 107,000 people whose data was not previously suspected of being stolen may have actually had their data stolen and will now receive a new round of warning letters.

Those newly discovered vulnerabilities include people who had were hired to new jobs and had their employment status verified by the Department of Labor and Training. A handful of people whose information was contained in child support database and whose filed passed through the Department of Children Youth and Families were also compromised.

Those who have data is exposed in the hack are eligible for free credit monitoring.

Advertisement

Tardiff said the state has not paid any ransom connected to the attack.



Source link

Rhode Island

2 dead, 1 seriously hurt after crash on I-95 South in Warwick

Published

on

2 dead, 1 seriously hurt after crash on I-95 South in Warwick


WARWICK, R.I. (WPRI) — Two people are dead and another person seriously hurt after a crash involving two vehicles on the highway in Warwick Saturday.

Rhode Island State Police said the crash happened around 1:34 p.m. on the ramp from Route 113 West to I-95 South.

According to police, a Hyundai SUV that was driving in the middle lane of the highway started to drift to the right, crossed the first lane, and then crossed onto the on-ramp lane. The car struck the guardrail twice before driving through the grass median.

The Hyundai then struck the driver’s side of a Mercedes SUV that was on the ramp, causing the Mercedes to roll over and come to a rest. The impact sent the Hyundai over the guardrail and down an embankment.

Advertisement

The driver of the Hyundai, a 73-year-old man, and his passenger, a 69-year-old woman, were both pronounced dead at the hospital.

A woman who was in the Mercedes was rushed to Rhode Island Hospital in critical condition.

State police said all lanes of traffic were reopened by 4:30 p.m.

The investigation remains ongoing.

Download the WPRI 12 and Pinpoint Weather 12 apps to get breaking news and weather alerts.

Advertisement

Watch 12 News Now on WPRI.com or with the free WPRI 12+ TV app.

Follow us on social media:

 

 



Source link

Advertisement
Continue Reading

Rhode Island

Judge rejects DOJ push for Rhode Island voter information

Published

on

Judge rejects DOJ push for Rhode Island voter information


A federal judge on Friday tossed the Department of Justice’s (DOJ) lawsuit aiming to force Rhode Island to hand over its voter information as part of the Trump administration’s push to acquire voter data from several states.

Rhode Island U.S. District Court Judge Mary McElroy wrote that federal law does not allow the DOJ “to conduct the kind of fishing expedition it seeks here,” siding with Rhode Island election officials. She added that the DOJ did not provide evidence to suggest that Rhode Island violated election law.

Advertisement

McElroy, a Trump appointee, wrote that she sided with the similar decision in Oregon. That decision ruled that the DOJ was not entitled to unredacted voter registration lists.

“Absent from the demand are any factual allegations suggesting that Rhode Island may be violating the list maintenance requirements,” she said in her ruling.

Rhode Island Secretary of State Gregg Amore (D) praised McElroy’s decision. He said in a statement that the Trump administration “seems to have no problem taking actions that are clear Constitutional overreaches, regularly meddling in responsibilities that are the rights of the states.”

“Today’s decision affirms our position: the United States Department of Justice has no legal right to – or need for – the personally-identifiable information in our voter file,” he said. “Voter list maintenance is a responsibility entrusted to the states, and I remain confident in the steps we take here in Rhode Island to keep our list as accurate as possible.”

The Hill reached out to the DOJ for comment.

Advertisement

The DOJ called for the voter lists as it investigated Rhode Island’s compliance with the National Voter Registration Act of 1993, which allowed Americans to register to vote when they apply for a driver’s license.

The DOJ sued at least 30 states, as well as Washington, D.C., in December demanding their respective voter data. This data includes birth dates, names and partial Social Security numbers.

At least 12 states have given or said they will give the DOJ their voter registration lists, according to a tracker operated by the Brennan Center for Justice.

The department stated after it lost a similar suit against Massachusetts earlier this month that it had “sweeping powers” to access the voter data and that, if states fail to comply, courts have a “limited, albeit vital, role” in directing election officers on behalf of the administration to produce the records. The DOJ cited the Civil Rights Act as being intended to unearth alleged election law violations.

Copyright 2026 Nexstar Media Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.

Advertisement



Source link

Continue Reading

Rhode Island

Single Dad Says Grandparents’ Rights Trial Has Cost Him More Than $500K, but He'll Do ‘Whatever It Takes’ to Keep Daughter Safe

Published

on

Single Dad Says Grandparents’ Rights Trial Has Cost Him More Than 0K, but He'll Do ‘Whatever It Takes’ to Keep Daughter Safe


As the two-year anniversary of his wife’s death approaches, widowed single father Scott Naso is sounding an alarm to fellow parents across the country — and especially in Rhode Island, where he lives with his now 4-year-old daughter, Laila.



Source link

Continue Reading
Advertisement

Trending