Deloitte reaches $6.3M deal to settle class action lawsuit in RIBridges data breach

Deloitte has reached a proposed $6.3 million settlement to resolve a class action lawsuit related to the RIBridges data breach that impacted approximately 735,501 individuals. The breach, carried out by the cybercrime group Brain Cipher, compromised personal data used for public benefit applications. While Deloitte denies any wrongdoing, the settlement shields them from future litigation from those who don't opt out. Class members could receive around $100 without providing proof of identity theft, though the actual payout may be lower depending on the number of claims filed. The state of Rhode Island, while not a party to the suit, is also released from related lawsuits.

The settlement requires final approval from a federal judge, with a preliminary approval and final approval hearing expected to take place over the next several months, potentially concluding in January 2026. Claims will be administered by Kroll, and eligible class members will receive notices with instructions on how to submit a claim or opt out.

Individuals can also seek reimbursement for documented losses up to $5,000. The settlement fund will cover attorneys’ fees, litigation costs, service awards to class representatives, and two years of medical data monitoring through CyEx. Any remaining funds will be donated to the Electronic Privacy Information Center.

(Source：Rhode Island Current)