The state of Rhode Island last week began a phased relaunch of the HealthyRhode customer portal associated with RIBridges system, which manages many of the state’s social service and benefit programs as well as its health insurance exchange.
Officials said the controlled relaunch is being attempted after a successful relaunch of the system’s internal employee portal earlier this month.
The popular RIBridges system that is used by more than 650,000 people has been offline since mid-December due to a ransomware attack that has exposed users’ private information. As part of the phased relaunch, limited groups of RIBridges users have been sent e-mails directing them to log into the portal, reset their password, and access their account.
After evaluating the portal’s performance during these initial phases, the state will determine the timeline for a full restoration of the HealthyRhode website for all customers.
On December 13, the state was informed by its services vendor, Deloitte Consulting, that there was a major security threat to the RIBridges system on December 5. Deloitte confirmed the presence of a malicious code in the system and implemented additional security measures. The system was taken offline.
Rhode Island Ransomware Attack Update: Some Stolen Data Posted to Dark Web
Deloitte has determined that the Brain Cipher international ransomware gang is behind the breach. Deloitte has also confirmed that some of the information breached contained names, addresses, dates of birth and Social Security numbers, as well as certain banking information. Any individual who has received or applied for health coverage and/or health and human services programs or benefits could be impacted by this leak.
The state has learned that hackers responsible for the ransomware attack have begun posting some of the stolen information to the dark web.
On January 10, the state sent letters to all users affected by the breach of the RIBridges database, which is managed by Deloitte. The letters confirmed that personal data was breached and provided directions on how to access free credit monitoring. The deadline to sign up for free credit monitoring online or via phone is April 30, 2025.
At this time, customers with accounts can only log in after receiving an e-mail. Existing or prospective customers who do not currently have a HealthyRhode account will not be able to create one. Account creation will be enabled soon, according to the state.
Since the attack, Deloitte has been hit with class action lawsuits over the cyber breach alleging that as the services provider for RIBridges, it has been negligent for failing to protect the plaintiffs’ sensitive data and for being slow to notify them of the breach.
In the meantime, customers who need to manage existing benefits or apply for benefits can do so by contacting the Rhode Island Department of Human Services or HealthSource RI directly. The HealthyRhode mobile app is not yet available.
RIBridges provides access to Medicaid, Supplemental Nutrition Assistance Program, Temporary Assistance for Needy Families, Child Care Assistance Program, health coverage purchased through HealthSource RI, Rhode Island Works, Long-Term Services and Supports, and general public assistance programs.
Was this article valuable?
Here are more articles you may enjoy.
Insurance Groups Celebrate Signing of Georgia Tort Reform Laws 
Dog Bite Claims Soar in Frequency and Cost: Report 
Group Sues California Department of Insurance Over FAIR Plan Surcharges 
Don’t Forget Tariff Impacts on Workers’ Compensation: Berkley 
