RIBridges data breach impacts those who received state assistance, class action claims

RIBridges class action lawsuit overview: 

• Who: Lori Marchand and Monica DePina filed a class action lawsuit against Deloitte Consulting LLP. 
• Why: Marchand and DePina claim Deloitte was responsible for protecting confidential private information exposed during a data breach involving RIBridges, Rhode Island’s online portal for government assistance.
• Where: The class action lawsuit was filed in Rhode Island federal court. 

Deloitte Consulting is responsible for a “massive” data breach of the RIBridges computer software system, a new class action lawsuit alleges. 

Plaintiffs Lori Marchand and Monica DePina’s class action lawsuit claims Deloitte is a third-party vendor responsible for protecting the confidential and private data of Rhode Islanders who use RIBridges to obtain social services. 

Marchand and DePina argue the incident was a “direct result” of Deloitte’s failure to implement adequate and reasonable cybersecurity procedures and protocols necessary to protect their private information. 

“Deloitte failed to take steps to institute adequate measures to prevent the data breach and left the RIBridges system vulnerable to a third-party attack,” the class action says. 

Marchand and DePina want to represent a class of all persons whose private information an unauthorized third party accessed during the RIBridges data breach.

RIBridges data breach affects 650K+ Rhode Islanders, class action says

Marchand and DePina argue the data breach puts more than 650,000 Rhode Island residents at risk of having their identities stolen and disabled some Rhode Islanders from receiving their government assistance in a timely fashion. 

“Plaintiffs and class members have been exposed to a heightened and imminent risk of fraud and identity theft. Plaintiffs and class members must now and in the future closely monitor their financial accounts to guard against identity theft,” the class action says. 

The state of Rhode Island is investigating Deloitte over the data breach, according to the RIBridges class action. 

Marchand and DePina claim Deloitte is guilty of negligence, breach of implied contract and unjust enrichment. 

The plaintiffs demand a jury trial and request declaratory relief and an award of compensatory, actual and statutory damages for themselves and all class members. 

Rhode Island state officials disclosed the data breach last month and attributed the incident to an international ransomware group. 

Were you affected by the RIBridges data breach? Let us know in the comments.

The plaintiffs are represented by Peter N. Wasylyk of the Law Offices of Peter N. Wasylyk, Lynda J. Grant of The Grant Law Firm, PLLC and Gary S. Graifman and Melissa R. Emert of Kantrowitz, Goldhamer & Graifman, P.C. 

The RIBridges class action lawsuit is Marchand, et al. v. Deloitte Consulting LLP, Case No. 1:24-cv-00554, in the U.S. District Court for the District of Rhode Island.

Read About More Class Action Lawsuits & Class Action Settlements:

• Akumin class action alleges data breach compromised protected health information
• Judge denies X’s bid to dismiss data breach class action
• Rhode Island data breach impacts hundreds of thousands
• $3.2M USAA settlement to resolve data breach class action