What happened?
Hackers installed malicious software and got into the RIBridges system, where people apply for health insurance and public assistance benefits. When they announced the cyberattack on Dec. 13, State officials confirmed that “there is a high probability that cybercriminals have obtained files with personally identifiable information.”
What is personally identifiable information (PII)?
PII includes names, addresses, dates of birth, and Social Security numbers, along with certain banking information. The State has indicated that the hackers might have obtained this information.
Who could be affected?
“To the best of our knowledge, any individual who has received or applied for State health coverage or health and human services programs or benefits” — from 2019 to present day — “could be impacted by this breach,” according to the website that the State has stood up since the cyberattack (click here for RIBridges Alert website).
The programs and benefits managed through the RIBridges system include but are not limited to:
- Medicaid
- Supplemental Nutrition Assistance Program (SNAP)
- Temporary Assistance for Needy Families (TANF)
- Child Care Assistance Program (CCAP)
- Health coverage purchased through HealthSource RI
- Rhode Island Works (RIW)
- Long-Term Services and Supports (LTSS)
- General Public Assistance (GPA) Program
- At HOME Cost Share
How many people could be affected?
At minimum, tens of thousands of Rhode Islanders — possibly many more than that.
What can you do?
- If you think you’ve been affected, there is a RIBridges data breach hotline now available.
- Phone number: 833-918-6603
- Hours: Open Mondays through Fridays from 9 AM to 9 PM.
- Reference number: The reference number for the Rhode Island incident is B137035. You may be asked for it when you call.
- Call center staff will be able to provide general information about the breach as well as steps customers can take now to protect their personal information.
- Unfortunately, while the investigation of the data involved is still happening, call center staff will not be able to confirm if your data is included in the breach at this time.
Households that have had personal information compromised will receive a letter by mail from the State that explains how to access free credit monitoring.