Home Part of States Newsroom
Brief
Deadline to submit claims for RIBridges data breach settlement is Jan. 14, 2026

Share

Deadline to submit claims for RIBridges data breach settlement is Jan. 14, 2026

Dec 02, 2025 | 5:35 pm ET
By Alexander Castro
Deadline to submit claims for RIBridges data breach settlement is Jan. 14, 2026
Description
A photo illustration shows sample claim mailers included in part of a class action lawsuit against Deloitte that is now open for claims submission. (Photo illustration by Alexander Castro/Rhode Island Current)

Rhode Islanders who received letters from the state that their personal information was compromised in the RIBridges data breach have the next six weeks to file a claim for a share of the $6.3 million class action settlement with Deloitte, the system’s vendor.

An estimated 735,501 Rhode Islanders whose personal information was compromised are considered class members, who can seek a flat reimbursement estimated at $100 per individual without having to provide proof of identity theft. Or, if you can provide documentation of losses tied to the breach, you can file for up to a $5,000 reimbursement. Class members can also make claims for two years of medical data monitoring, regardless of which payout they choose to pursue. 

Eligible Rhode Islanders have started to receive postcards in the mail with instructions on how to file a claim. Claims can also be made at the settlement website, ribridgesdatasettlement.com.

Claims need to be filed by Jan. 14, 2026. 

People who wish to opt out of or object to the class action settlement need to file by Dec. 30, 2025. The settlement is being managed by the Kroll Settlement Administration.

The data breach was made public in December 2024. The cyberattack, for which cybercriminal group Brain Cipher eventually took credit, stole private information from people who used the RIBridges platform, which is used to apply for public benefits such as food stamps as well as health insurance coverage through the state marketplace.

The settlement is the end result of the case Pannozzi v. Deloitte Consulting LLP, which was filed in March in U.S. District Court for the District of Rhode Island and consolidated multiple lawsuits against Deloitte for the global firm’s role in the data breach. As part of the suit, the state-contracted Deloitte has denied any wrongdoing.

The $100 payout, however, is an estimate as the settlement is structured to pay out attorneys’ fees and other court costs before class members can be compensated. The plaintiffs’ legal team can absorb up to one-third of the settlement money, under the agreement’s terms. The seven named plaintiffs in the suit are also allowed $2,500 payouts.

If each of the more than 735,000 class members filed a claim, that would work out to about $8.50 per flat payment, prior to litigation fees or other costs. Accounting for litigation fees and the larger payouts attached to documented losses, the flat rate payouts could drop lower. Conversely, payouts could potentially be more than $100 if fewer people sign up for compensation. 

After the deadline for claims submissions, on Jan. 29, 2026, the settlement is scheduled for a court date in which it’s expected to receive the final OK from a federal judge.