Rhode Island benefits system disrupted after data theft

Unauthorized access to systems, accounts, networks, or data.

Theft, exposure, or abuse of user or administrator credentials.

Data was copied, transferred, downloaded, or otherwise removed from the affected environment by an unauthorized party.

Stolen, exposed, or otherwise compromised data was publicly released, posted, distributed, or offered for download.

A service, system, platform, or operational capability remained available only in part or with significant limitations.

A public, customer, employee, student, patient, vendor, or partner portal was unavailable or materially impaired.

Internal business, administrative, operational, or staff-facing systems were unavailable.

A specific application or software platform became unavailable or unusable.

The organization could not create, update, search, file, approve, transmit, or otherwise process records normally.

Public administrative, licensing, permitting, court, tax, records, benefits, or other government services were materially affected.

Staff or users had to rely on paper, telephone, in-person, offline, or other manual processes.

The organization redirected users to a different website, office, telephone number, email address, provider, or service channel.

The actor explicitly threatened to publish or publicly release victim data or incident details.

The victim was listed on a threat actor or ransomware data-leak site as an alleged target or nonpaying victim.

The actor imposed a deadline or public countdown before increasing the demand, publishing data, deleting keys, or taking another threatened action.