Ransomware gang leaks data stolen in Rhode Island's RIBridges Breach – BleepingComputer

New DoubleClickjacking attack exploits double-clicks to hijack accounts
Over 3 million mail servers without encryption exposed to sniffing attacks
New details reveal how hackers hijacked 35 Google Chrome extensions
The biggest cybersecurity and cyberattack stories of 2024
Ransomware gang leaks data stolen in Rhode Island’s RIBridges Breach
New DoubleClickjacking attack exploits double-clicks to hijack accounts
This $40 training deal covers 5 platform certification paths in 1 bundle
Chinese hackers targeted sanctions office in Treasury attack
How to access the Dark Web using the Tor Browser
How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11
How to use the Windows Registry Editor
How to backup and restore the Windows Registry
How to start Windows in Safe Mode
How to remove a Trojan, Virus, Worm, or other Malware
How to show hidden files in Windows 7
How to see hidden files in Windows
Remove the Theonlinesearch.com Search Redirect
Remove the Smartwebfinder.com Search Redirect
How to remove the PBlock+ adware browser extension
Remove the Toksearches.xyz Search Redirect
Remove Security Tool and SecurityTool (Uninstall Guide)
How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo
How to remove Antivirus 2009 (Uninstall Instructions)
How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller
Locky Ransomware Information, Help Guide, and FAQ
CryptoLocker Ransomware Information Guide and FAQ
CryptorBit and HowDecrypt Information Guide and FAQ
CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ
Qualys BrowserCheck
STOPDecrypter
AuroraDecrypter
FilesLockerDecrypter
AdwCleaner
ComboFix
RKill
Junkware Removal Tool
eLearning
IT Certification Courses
Gear + Gadgets
Security
Best VPNs
How to change IP address
Access the dark web safely
Best VPN for YouTube

The Brain Cipher ransomware gang has begun to leak documents stolen in an attack on Rhode Island’s “RIBridges” social services platform.
RIBridges is an integrated eligibility system (IES) used by the state to manage and deliver social assistance programs, including healthcare, food assistance, child care, and other services.
Rhode Island first learned that RIBridges was the target of an attack on December 5 after being notified by its vendor, Deloitte. However, it wasn’t until December 10 that it was confirmed that threat actors gained access to the system and likely stole data.
“On December 10, the State received confirmation from Deloitte that there had been a breach of the RIBridges system based on a screenshot of file folders sent by the hacker to Deloitte,” reads a statement from the government.
“On December 13, Deloitte confirmed there was malicious code present in the system, and the State directed Deloitte to shut RIBridges down to remediate the threat.” continued the statement.
Last week, the Brain Cipher ransomware gang began leaking some of the stolen data on its data leak site.
Cybersecurity researcher Connor Goodwolf downloaded the data and claims it contains the personal data of both adults and minors.
“The ransomware group Brain Cipher has released the breach data from the Deloitte RIBridges hack, containing PII of not just adults but minors,” tweeted the researcher.
Based on screenshots shared by GoodWolf, the stolen files consist of numerous archives containing what appear to be Oracle databases, backups, and other data.
Goodwolf was previously sued by the City of Columbus for sharing samples of data stolen from the City’s IT network and leaked by the Rhysida ransomware gang. That lawsuit has since been dismissed.
In a statement released earlier this week, Governor McKee confirmed that some data was released on the dark web.
“Deloitte informed us that the cybercriminal released some RIBridges files on the dark web. While IT teams are working diligently to analyze the files, the most important thing Rhode Islanders can do is protect their personal information now,” tweeted McKee.
It is believed that approximately 650,000 people were impacted by the breach and may have had their names, addresses, dates of birth, Social Security numbers, and certain banking information exposed in the attack.
Due to this data’s sensitive nature, state officials advise Rhode Islanders to freeze and monitor their credit for fraudulent activity. It is also advised to be on the lookout for targeted phishing scams utilizing the stolen data that may attempt to steal further information.
Brain Cipher is a ransomware gang that began conducting attacks in June 2024, with the group gaining media attention after it attacked Indonesia’s temporary National Data Center.
The ransomware gang utilizes an encryptor created using the leaked LockBit 3.0 builder and uses a data leak site to extort victims into paying a ransom demand.
At this time, the Brain Cipher data leak site is offline and the leaked data is not accessible. However, their Tor negotiation page continues to work, potentially indicating that the data leak site is under a DDoS attack to prevent the dissemination of stolen data.
Rhode Island confirms data breach after Brain Cipher ransomware attack
The biggest cybersecurity and cyberattack stories of 2024
US indicts Snowflake hackers who extorted $2.5 million from 3 victims
Clop ransomware is now extorting 66 Cleo data-theft victims
Ascension: Health data of 5.6 million stolen in ransomware attack
Not a member yet? Register Now
Microsoft issues urgent dev warning to update .NET installer link
US Treasury Department breached through remote support platform
New details reveal how hackers hijacked 35 Google Chrome extensions
Latrodectus malware and how to defend against it with Wazuh
Have Your AD Password Policy Meet NIST Requirements
Save IT time with self-service password resets
Cynet Delivers 100% Protection and 100% Detection Visibility in 2024 MITRE ATT&CK Evaluation
Inside the incident: Uncovering an advanced phishing attack
Terms of Use – Privacy Policy – Ethics Statement – Affiliate Disclosure
Copyright @ 2003 – 2025 Bleeping Computer^® LLC – All Rights Reserved
Not a member yet? Register Now
Read our posting guidelinese to learn what content is prohibited.

source
This is a newsfeed from leading technology publications. No additional editorial review has been performed before posting.