Ransomware attackers leak stolen Rhode Island private info following hack

Date:
Fri, 03 Jan 2025 13:09:00 +0000

Description:
Group responsible for recent RIBridges ransomware attack has begun leaking
files containing PII.

FULL STORY

The ransomware gang involved in the recent attack against the Rhode Island
health coverage, human services, and benefit programs website, RIBridges, has
started leaking documents from the attack. 

The Brain Cipher ransomware group began leaking documents on its data leak
site last week, likely in an effort to exert pressure on RIBridges and the
State to pay the ransomware fee. 

RIBridges was first targeted on December 5 2024, before the states vendor
Deloitte confirmed the breach on December 10 after being sent a screenshot of
internal systems by the attackers, and informed the state that the attackers
had successfully gained access to data and had potentially stolen it.

Data on adults and minors leaked

The data stolen in the attack could include names, addresses, dates of birth,
Social Security numbers, and certain banking information, and could affect up
to 650,000 individuals who used the RIBridges system. 

Cybersecurity researcher Connor Goodwolf downloaded the leaked files and
provided several screenshots of folders, with some shown to contain tens of
gibibytes of data. 

The ransomware group Brain Cipher has released the breach data from the
Deloitte RIBridges hack, containing PII of not just adults but minors,
Goodwolf added in a post on X (formerly Twitter). The screenshots from the
site also show a statement from the Brain Cipher group stating, It seems that
it was easier to pay and fix everything. 

Rhode Islands Governor Daniel McKee confirmed that data from the RIBridges
system had been leaked online in a statement , Deloitte informed us that the
cybercriminal released some RIBridges files on the dark web. While IT teams
are working diligently to analyze the files, the most important thing Rhode
Islanders can do is protect their personal information now. 

Rhode Island state officials have recommended that individuals who believe
they may have been affected by the ransomware attack should use the free
credit monitoring services being provided by the state to freeze and monitor
their credit, and also remain vigilant against potential phishing attacks
targeting compromised email addresses. 

Via Bleeping Computer

======================================================================
Link to news story:
https://www.techradar.com/pro/security/ransomware-attackers-leak-stolen-rhode-
island-private-info-following-hack

$$
--- SBBSecho 3.20-Linux