RIBridges $6.3M Data Breach Class Action Settlement

Individuals in the United States who received a notice from the State of Rhode Island stating their personal information may have been exposed in the RIBridges data breach may be eligible to receive up to $5,000 and medical data monitoring from a class action settlement. The breach affected approximately 735,501 individuals.

Deloitte Consulting LLP agreed to pay $6.3 million to resolve claims that, around December 5, 2024, cybercriminals accessed personal information stored in the RIBridges system, including names, addresses, Social Security numbers, banking information and health-related data.

Who Is Eligible?

Class members must meet both of the following criteria:

  • Be a living individual residing in the United States
  • Have received an official notice from the State of Rhode Island stating their information may have been affected by the Deloitte data breach

Settlement Benefits

Class members may choose from the following options:

Cash Payment A – Documented losses (up to $5,000):
Reimbursement for documented out-of-pocket losses related to the breach. Eligible documentation may include receipts, invoices, email correspondence, bank records or credit monitoring/identity theft protection costs.

Cash Payment B – Alternate cash payment (estimated $100):
For class members who do not submit a documented-loss claim. Final payment depends on the number of valid claims.

Medical data monitoring:
All class members may elect to receive two years of CyEx medical data monitoring, which includes:

  • Real-time one-bureau credit monitoring
  • Dark web scanning
  • Security freeze assistance
  • Victim support services
  • Up to $1,000,000 in identity theft insurance
  • Access to fraud resolution specialists

How to File a Claim

Class members must submit a claim form either online or by mailing a printed form.
Claims must be submitted or postmarked by January 14, 2026.

Mailing address:
Pannozzi v. Deloitte Consulting LLP
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324

Required Claim Information

Payment Options

  • Electronic payment (online claims only)
  • Paper check

Settlement Fund Distribution

The $6.3 million fund will be used for:

  • Settlement administration costs (estimated at $500,000)
  • Attorneys’ fees (up to $2,100,000)
  • Attorneys’ costs (to be reviewed separately by the court)
  • Service awards to class representatives (up to $2,500 each)
  • Medical data monitoring costs
  • Payments to approved claimants from remaining funds

Important Dates

  • Opt-out deadline: December 30, 2025
  • Claim filing deadline: January 14, 2026
  • Final approval hearing: January 29, 2026

When Will Payments Be Sent?

Payments and medical monitoring activation codes will be issued approximately 75 days after final court approval, once all appeals (if any) have been resolved.

Why This Settlement Exists

The lawsuit alleges that cybercriminals accessed the RIBridges system on or about December 5, 2024, compromising sensitive personal information. Deloitte, which operated and maintained the system, denies wrongdoing but agreed to settle to avoid the burden and uncertainty of continued litigation.

Settlement Summary
Award: $100–$5,000
Deadline: January 14, 2026