Rhode Island benefits system disrupted after data theft
Claim details
The tracker observed a Brain Cipher listing using this misspelled DHS name and dhs.ri.gov on Dec. 23, 2024. CrowdStrike’s separate forensic account describes a Dec. 4 Brain Cipher leak-site allegation naming Deloitte UK and a Dec. 15 deadline. Those references do not establish two intrusions or a global Deloitte compromise. The investigation confirmed theft from the RIBridges environment but found no evidence of ransomware execution or Brain Cipher ransom notes. The original actor-post time, exact claimed volume and operator attribution remain unverified here. Tracker observation is not original publication.