PROVIDENCE, R.I. (WPRI) -- Rhode Islanders have filed federal class action lawsuits over the RIBridges cyberattack, less than 72 hours after officials disclosed the large-scale hack of many state health and benefits programs. Civil complaints were filed against Deloitte, the contractor that runs the RIBridges system for the state, in U.S. District Court in Rhode Island as well as in New York, where the company is headquartered. The complaint alleges that Deloitte failed to adequately protect individuals' sensitive personally identifiable information maintained in RIBridges, the system used to manage social services such as SNAP and Medicaid benefits, as well as health insurance through HealthSourceRI. Gov. Dan McKee is scheduled to hold a third news conference about the cyberattack on Monday at 3 p.m. The only portal used for the programs, HealthyRhode, was taken offline on Friday due to the hack. Former state Rep. Peter Wasylyk is the attorney representing the plaintiffs in the new lawsuit. He said Deloitte has left Rhode Islanders receiving state benefits "extremely vulnerable." "Data breaches take an enormous emotional and financial toll on affected individuals, disrupting their lives, causing them stress, and putting them at risk of identity theft, fraud, and other forms of misuse of their personally identifiable information," Wasylyk said in a statement. "This incident is just another example of the critical need for entities to take strong measures to safeguard such sensitive personal information." McKee urges RI residents to act immediately after major cyberattack on state system Wasylyk said the plaintiffs are committed to holding Deloitte accountable and "ensuring that those affected are properly compensated for the harm caused by this data breach." Deloitte is being accused of negligence, breach of contract and unjust enrichment. In a statement on Friday night, Deloitte spokesperson Karen Walsh said the company is working to deal with the situation. “Upon learning that a state system supported by Deloitte had been attacked by an international cybercriminal group, we launched an investigation in collaboration with our client and law enforcement officials," she said. "While that investigation is ongoing, we have shown over the past decade our unwavering commitment to the state of Rhode Island and the people they serve," she continued. "We will continue to work around the clock to resolve this matter." Officials say they first learned on Dec. 5 that an international cybercriminal group may have breached RIBridges, the state system formerly known as UHIP used for a host of health and benefits programs. They said they became more alarmed when the hackers sent a screenshot of file folders from RIBridges and revealed malware had been put into the system. The hackers are believed to have stolen information like Social Security and bank account numbers for potentially hundreds of thousands of residents who have used a long list of state programs over the last eight years. The programs include Medicaid, the Supplemental Nutrition Assistance Program (SNAP), Temporary Assistance for Needy Families (TANF), the Child Care Assistance Program (CCAP), HealthSource RI health insurance, Rhode Island Works, Long-Term Services and Supports (LTSS), the General Public Assistance (GPA) program, and AT HOME cost-sharing. Individuals who are directly affected will be getting a letter in the mail from the state notifying them. Since Sunday, a toll-free hotline has been accepting calls to give people general information about the breach and advising them on steps they can take to protect their data. Here’s how to contact the new RI cyberattack call center McKee's office said Monday that Deloitte is still in the process of identifying impacted customers, and that representatives at the call center "will not yet be able to identify whether particular individuals' data has been impacted." SNAP and RI Works beneficiaries are also being urged to learn how they can freeze and unfreeze their EBT cards in order to ensure their benefit payments aren’t stolen. That can be done through the company that manages the cards, FIS, either online or using its mobile app. Detailed instructions are in a PDF on the state’s website. Alexandra Leslie ([email protected]) is a Target 12 investigative reporter covering Providence and more for 12 News. Connect with her on Twitter and on Facebook. Ted Nesi contributed to this report.