Rhode Island Faces Cyberattack on Health System

News Summary

Rhode Island is dealing with a significant cyberattack that has compromised its RIBridges system, risking sensitive data for potentially hundreds of thousands of residents. The malware breach led to an emergency shutdown, blocking access to health services during open enrollment. Individuals who have engaged with RIBridges since 2019 are urged to safeguard their information. The state is establishing a call center for support and will provide ongoing updates, as recovery efforts from the attack commence. This incident reflects increasing cyber threats targeting government agencies.

Rhode Island is currently grappling with a significant cyberattack that has compromised its RIBridges system, previously known as the Unified Health Infrastructure Project (UHIP). This breach poses serious risks to the personal data of potentially hundreds of thousands of residents.

The cyberattack employed malware that presented an immediate danger, forcing Governor Dan McKee to order the system’s shutdown without delay. This drastic measure coincided with the open enrollment period for HealthSourceRI, the state’s healthcare exchange, disabling customers from accessing critical health services online.

Data that has potentially been compromised includes sensitive information such as names, addresses, dates of birth, Social Security numbers, and some banking details. State officials have indicated that individuals who have received or applied for health coverage or other services through RIBridges since 2019 are at risk of exposure. In light of this data breach, residents affected are strongly urged to take proactive steps to protect themselves. This includes freezing their credit, changing online passwords, and consulting their banks for enhanced security measures.

To assist affected residents, a call center is being established, and ongoing updates regarding the situation will be provided through a dedicated website. Notifications will also be mailed to individuals identified as victims of the breach.

The state’s awareness of the cyber threat began on December 5, when federal and state law enforcement were alerted to possible breaches. A more substantial evaluation confirmed that sensitive information was accessed on December 10, when hackers supplied Deloitte, the state’s external vendor, with a screenshot showing the files that had been compromised. The hackers claim to have extracted one terabyte of data and are demanding ransom for its return.

Governor McKee’s office has indicated a high likelihood that files containing personally identifiable information were accessed by the cybercriminals. Meanwhile, Deloitte is tasked with the critical job of restoring the RIBridges system safely to prevent disruptions in benefits for residents. While the system remains offline, residents must resort to paper applications for benefits.

This incident at RIBridges is part of a growing trend in which government agencies across the United States have become targets for hackers. Recently, similar attacks have occurred in various government entities, including the Providence Public School District.

A thorough analysis of the data breach is currently underway to thoroughly assess the implications and extent of the compromised information. State officials are working diligently to manage the situation and protect resident data from further unauthorized access.

The urgency of this situation highlights the critical need for enhanced cybersecurity measures within government systems as cyber threats continue to rise. The state’s immediate focus is on restoring services while ensuring the protection and privacy of its residents’ information.

Deeper Dive: News & Info About This Topic

• GoLocalProv: Ken Block
• Providence Journal: Feds Seek to Recoup $37.3 Million
• Google Search: Cybersecurity Risks in Government Agencies
• WPRI: US Government Wants $37M Back from RI
• Boston Globe: Cyber Attack on RIBridges System