RI offers 5 years of credit monitoring to those affected by data breach
Jan 10, 2025
PROVIDENCE, R.I. (WPRI) — Rhode Islanders are being advised to keep an eye on their mail as the state continues to recover from a massive cyberattack.
Gov. Dan McKee announced Friday that more than 700,000 letters are going out to those whose personal data may have been compromised.
The letters, which are being mailed by Experian, will have the state seal in the top-left corner and include a code to access five years of free credit monitoring.
View a copy of the letter: English | Español | Português
An estimated 657,000 Rhode Islanders are potentially affected by the hack, but McKee said parents and guardians may receive letters for other members of their household. Minors who may be impacted will receive separate access codes, according to the governor.
The deadline to apply for free credit monitoring is April 30, 2025.
McKee noted that it may take several days for the letters to arrive and asked people to bear that in mind before contacting the state's call center.
"We know that this remains a concerning situation for the people who have been impacted and we appreciate your patience while the letters are delivered," he said.
RELATED: Social Security databases exposed in RI cyberattack; hackers sought $23M ransom
The data breach, first disclosed by state officials in mid-December, involved RIBridges, the state's online portal for obtaining health insurance through HealthSource RI and social services like Medicaid and SNAP benefits.
Anyone who's used the RIBridges system over the past eight years may be affected. State officials have encouraged those residents to update and strengthen their passwords, freeze their credit and place fraud alerts on their files.
Deloitte, the contractor that runs the RIBridges system, is still in the process of reviewing the contents of all the breach files, McKee said. If additional victims are identified, they will receive letters at a later date.
Anyone needing help or looking for more information should visit cyberalert.ri.gov or contact the state's call center at (833) 918-6603. If a reference number is requested, it’s B137035.
McKee pointed out that the call center cannot reveal whether a caller's data was compromised. He also said callers will not be able to sign up for free credit monitoring if they did not receive a letter with a code.
MORE: How to protect your personal data after RI cyberattack
Chief Digital Officer Brian Tardiff said the state has received a summary report from Deloitte and a draft summary report from the third-party vendor they're working with, which validate that the security threat has been remediated.
"The findings in these reports provide us a high level of confidence that we know how the breach was executed and that we have taken the appropriate measures to ensure the system can be restored safely," he explained.
According to Tardiff, state case workers have once again been given access to RIBridges, so the next step is to get the public-facing features back online. He said the goal is to have the system fully back online by mid-January.
Close
Thanks for signing up!
Watch for us in your inbox.
Subscribe Now
Watch Now: Livestreaming
SIGN UP NOW