Governor McKee Announces Finalization of Settlement with Deloitte Related to RIBridges Cybersecurity Incident

Published on Friday, April 24, 2026

PROVIDENCE, RI — Governor Dan McKee today announced that the State of Rhode Island, through the Department of Administration, has finalized a settlement agreement with Deloitte Consulting LLP related to the December 2024 RIBridges cybersecurity incident and the subsequent system restoration efforts. 

Under the terms of the agreement, at Governor McKee’s and the State’s request, Deloitte has agreed to pay the State an additional $7 million. Early last year, Governor McKee secured a $5 million payment from Deloitte for unexpected expenses related to the incident, bringing the State’s total direct financial recovery to $12 million. Deloitte has also provided $6 million worth of system enhancements, operational support, and business continuity services in response to the incident that were outside the scope of their contract. The State will not incur additional charges for these services. 

“This agreement reflects a deliberate effort to protect Rhode Island taxpayers while ensuring the State has the resources needed to move forward,” said Governor McKee. “During the cybersecurity incident, my administration worked diligently to ensure Rhode Islanders maintained access to their benefits. Our focus remains on supporting Rhode Islanders who rely on these critical benefits.” 

“This was a comprehensive and carefully negotiated agreement,” said Thomas Verdi, Acting Director of the Department of Administration. “It ensures the State receives additional financial support while also capturing significant value in additional technological enhancements and operational support services during system restoration.”