Rhode Island governor warns residents of cyberattack on state benefits system

Category	Details
Threat Actors	Brain Cipher ransomware group (variant of LockBit 3.0 ransomware, emerged in June)
Campaign Overview	Cyberattack on Rhode Island’s RIBridges system used for managing social service programs
Target Regions/Victims	Rhode Island residents, particularly users of Medicaid, SNAP, and Health Source RI systems
Methodology	Extortion via stolen data; no system decryption; shared legitimate file screenshots
Product Targeted	RIBridges benefits management system
Malware Reference	Brain Cipher ransomware (variant of LockBit 3.0)
Tools Used	Ransomware targeting external systems managed by Deloitte
Vulnerabilities Exploited	Likely weak cybersecurity defenses in third-party-managed system (Deloitte)
TTPs	- Data exfiltration - Extortion demands - Public disclosure threats - Use of negotiators
Attribution	Brain Cipher ransomware group; tied to prior attacks on Indonesian data center and Providence schools
Recommendations	- Immediate system shutdown and mitigation - Provide credit monitoring services - Transition to paper systems temporarily - Reevaluate partnerships with third-party vendors (e.g., Deloitte)
Source	The Record

Read full article: https://therecord.media/rhode-island-governor-cyberattack-benefits

The above summary has been generated by an AI language model