Deloitte could pay $6.3m to settle R.I. cyberattack lawsuits

Deloitte is facing a proposed $6.3 million settlement in a class-action lawsuit related to a 2024 cyberattack that compromised the data of over 640,000 Rhode Island residents. The breach, carried out by the ransomware group Brain Cipher, targeted the RIBridges system, which manages various public benefit programs. Stolen data included sensitive information such as Social Security numbers and banking details.

The proposed settlement offers class members two options: reimbursement for documented losses up to $5,000 or an automatic $100 payment. Additionally, the settlement provides access to two years of medical data monitoring services through CyEx, including credit file monitoring, dark web scanning, and identity theft insurance. Deloitte has previously agreed to pay the state of Rhode Island $5 million for expenses related to the attack.

Six class-action lawsuits were consolidated in federal court, and an investigation by CrowdStrike revealed the breach began in July 2024, months before its discovery in December. The Rhode Island Attorney General’s office is conducting a separate, ongoing investigation into the matter.

(Source：The Boston Globe)