RI Delegation Wants Feds to Help Protect Residents in Wake of Cyberattack on RIBridges Computer System
WASHINGTON, DC – In an effort to assist the state in the wake of a cyberattack against RIBridges – the state’s integrated online platform for social services – and mitigate the impact of the attack on Rhode Islanders, U.S. Senators Jack Reed and Sheldon Whitehouse and U.S. Representatives Seth Magaziner and Gabe Amo today sent a letter to the U.S. Department of Health and Human Services (HHS) and U.S. Department of Agriculture (USDA) requesting additional flexibility and assistance to ensure residents are protected and do not lose access to vital services.
Rhode Island’s Congressional delegation wants the federal government to coordinate efforts with the state to help keep participants enrolled in Medicaid, Supplemental Nutrition Assistance Program (SNAP), and Temporary Assistance for Needy Families (TANF).
“In light of a major cyberattack, we write to urge your Departments to grant the State of Rhode Island flexibility and time to comply with administrative requirements related to its public benefits programs and to provide any additional support to ensure that eligible individuals do not lose access to needed benefits,” the four members of the delegation wrote.
The letter comes on the heels of a cyberattack on RIBridges (originally known as UHIP), by the international ransomware group known as Brain Cipher. RIBridges was developed by consulting firm Deloitte under a state contract. The cyberattack put the personal data (including names, addresses, Social Security numbers, and bank information) of approximately 500,000 people at risk as the hackers demand a ransom payment.
The letter notes that in the wake of the attack: “The State directed the vendor responsible for administering the platform to shut down RI Bridges in order to remove all malicious code and remediate the threat. Individuals now must submit paper applications to secure their benefits. The impact could be large since RI Bridges manages enrollment and eligibility verifications for programs, including Medicaid, Supplemental Nutrition Assistance Program (SNAP), Temporary Assistance for Needy Families (TANF), and more. HealthSource RI, the state’s Affordable Care Act marketplace was also affected by this hack, which comes during the annual open-enrollment period for health insurance, when people apply for or renew coverage.”
As the state continues to cooperate with law enforcement and governmental investigators, the delegation is urging all Rhode Islanders to be proactive in protecting their personal data, changing passwords, and monitoring their financial accounts for unauthorized activity.
The state launched a website — cyberalert.ri.gov — and special hotline (833) 918-6603 to answer questions and assist those impacted by the cyberattack.
Full text of the letter follows:
December 17, 2024
Dear Secretaries Becerra and Vilsack:
In light of a major cyberattack, we write to urge your Departments to grant the State of Rhode Island flexibility and time to comply with administrative requirements related to its public benefits programs and to provide any additional support to ensure that eligible individuals do not lose access to needed benefits.
On December 5, 2024, RI Bridges, the State of Rhode Island’s integrated online platform for social services, was hacked and the personal data (including names, addresses, Social Security numbers, and bank information) of approximately 500,000 people was stolen and has been held for ransom. The State directed the vendor responsible for administering the platform to shut down RI Bridges in order to remove all malicious code and remediate the threat. Individuals now must submit paper applications to secure their benefits. The impact could be large since RI Bridges manages enrollment and eligibility verifications for programs, including Medicaid, Supplemental Nutrition Assistance Program (SNAP), Temporary Assistance for Needy Families (TANF), and more. HealthSource RI, the state’s Affordable Care Act marketplace was also affected by this hack, which comes during the annual open-enrollment period for health insurance, when people apply for or renew coverage.
We appreciate everything your Departments have done already to assist Rhode Island with this situation, but given the scope of this hack and that it has targeted our most vulnerable constituents, we ask that you grant the State of Rhode Island any assistance and flexibility it requires within all application rules and regulations.
Thank you for your attention to this request, and we look forward to your prompt reply.
Sincerely,
