Rhode Island benefits system shut down after serious cyberattack

In December 2024, Rhode Island's online benefits system known as RIBridges was taken offline after a cyberattack compromised its security. The system, vital for accessing benefits such as Medicaid and SNAP, was shut down to mitigate risks following the attack, which occurred on a Friday. Authorities reported that this incident might have exposed personal information, including names, addresses, and social security numbers of users from 2019 to the present, affecting hundreds of thousands of people. Governor Dan McKee, during a press conference, addressed the nature of the attack, clarifying that it was not a ransomware attack but rather an activity aimed at extorting the state by a cybercriminal group. In addition to RIBridges, the attack also impacted HealthSource RI, the state's healthcare marketplace. The state's Chief Digital Officer and Chief Information Officer, Brian Tardiff, provided information during the briefing about the attack's nature and the precautionary steps being taken. The Rhode Island government is making efforts to restore the online system by the end of the healthcare open enrollment period, which is set to conclude on January 31st. In the interim, residents of Rhode Island are unable to access the web portal or application associated with RIBridges, hindering their ability to apply for state benefits efficiently. To assist those affected, the state plans to release a call center number for support related to the cyber breach, which will be operational for specific hours over the upcoming days. Furthermore, instructions for applying through mail will be made available on the state's Department of Human Services website, ensuring that individuals can still access vital services despite the digital disruption. The situation underlines the growing threats faced by online governmental services, particularly in the realm of public assistance programs. With an increased reliance on digital systems, the potential risks of cyberattacks raise important questions regarding the security measures in place and the privacy of sensitive information held by state agencies. The state government is expected to take further measures to enhance cybersecurity and protect citizen data from similar incidents in the future.