Individuals in the United States who received a notice from the State of Rhode Island stating their personal information may have been exposed in the RIBridges data breach may be eligible to receive up to $5,000 and medical data monitoring from a class action settlement. The breach affected approximately 735,501 individuals.
Deloitte Consulting LLP agreed to pay $6.3 million to resolve claims that, around December 5, 2024, cybercriminals accessed personal information stored in the RIBridges system, including names, addresses, Social Security numbers, banking information and health-related data.
Who Is Eligible?
Class members must meet both of the following criteria:
- Be a living individual residing in the United States
- Have received an official notice from the State of Rhode Island stating their information may have been affected by the Deloitte data breach
Settlement Benefits
Class members may choose from the following options:
Cash Payment A – Documented losses (up to $5,000):
Reimbursement for documented out-of-pocket losses related to the breach. Eligible documentation may include receipts, invoices, email correspondence, bank records or credit monitoring/identity theft protection costs.
Cash Payment B – Alternate cash payment (estimated $100):
For class members who do not submit a documented-loss claim. Final payment depends on the number of valid claims.
Medical data monitoring:
All class members may elect to receive two years of CyEx medical data monitoring, which includes:
- Real-time one-bureau credit monitoring
- Dark web scanning
- Security freeze assistance
- Victim support services
- Up to $1,000,000 in identity theft insurance
- Access to fraud resolution specialists
How to File a Claim
Class members must submit a claim form either online or by mailing a printed form.
Claims must be submitted or postmarked by January 14, 2026.
Mailing address:
Pannozzi v. Deloitte Consulting LLP
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
Required Claim Information
- Class Member ID (from the official settlement notice)
- Documentation for any claimed financial losses, such as receipts or third-party records
Payment Options
- Electronic payment (online claims only)
- Paper check
Settlement Fund Distribution
The $6.3 million fund will be used for:
- Settlement administration costs (estimated at $500,000)
- Attorneys’ fees (up to $2,100,000)
- Attorneys’ costs (to be reviewed separately by the court)
- Service awards to class representatives (up to $2,500 each)
- Medical data monitoring costs
- Payments to approved claimants from remaining funds
Important Dates
- Opt-out deadline: December 30, 2025
- Claim filing deadline: January 14, 2026
- Final approval hearing: January 29, 2026
When Will Payments Be Sent?
Payments and medical monitoring activation codes will be issued approximately 75 days after final court approval, once all appeals (if any) have been resolved.
Why This Settlement Exists
The lawsuit alleges that cybercriminals accessed the RIBridges system on or about December 5, 2024, compromising sensitive personal information. Deloitte, which operated and maintained the system, denies wrongdoing but agreed to settle to avoid the burden and uncertainty of continued litigation.
Settlement Summary
Award: $100–$5,000
Deadline: January 14, 2026
