Class action claims against Deloitte over RIBridges breach pile up

About 6.5% of postcard recipients file claims, court records show

Sample claim mailers included in part of a class action lawsuit against Deloitte that now has a proposed settlement.
Sample claim mailers included in part of a class action lawsuit against Deloitte that now has a proposed settlement.
Photo illustration by Alexander Castro/Rhode Island Current
Share
Sample claim mailers included in part of a class action lawsuit against Deloitte that now has a proposed settlement.
Sample claim mailers included in part of a class action lawsuit against Deloitte that now has a proposed settlement.
Photo illustration by Alexander Castro/Rhode Island Current
Class action claims against Deloitte over RIBridges breach pile up
Copy

Slightly more than 47,000 people have filed claims in a class action suit over the 2024 RIBridges data breach, according to a court filing Thursday from the court-appointed settlement administrator.

Kroll Settlement Administration, the national firm handling the claims, sent postcards to 729,946 people whose personal information was compromised by the breach of the state’s public benefit and health insurance portal. These class members could pursue one of two reimbursements under the settlement terms. Those with documented losses related to the breach could apply for up to $5,000, while all class members were permitted a flat, approximately $100 payment sans proof.

Class members could also submit claims for two years of medical data monitoring in addition to whatever payout they chose.

The $100 estimated payment is subject to pro rata increase or decrease, meaning the final amount is dependent in part on how many people submitted a claim. The $6.3 million in the settlement fund will be dispensed first to medical monitoring costs, then documented loss payments and finally the flat payment recipients.

The settlement fund has other costs to absorb as well: up to $2.1 million can go toward attorney and legal fees, and the class representatives — the seven named plaintiffs in the lawsuit — are eligible for up to $2,500 each.

A Dec. 15 filing — the plaintiffs’ motion for final approval — relayed additional details about what transpired between claim forms going out in late November and last week’s deadline to submit.

The filing noted that Kroll used address tracing to re-mail notices for some class members, and that the firm’s expected success rate in reaching affected people “far exceed[ed] the Federal Judicial Center’s standard of 70-95%.”

As of Dec. 8, 2025, Kroll reported that it had received 15,522 claim forms. The company also received 399 calls to the toll-free line, it reported a day later.

“Class Counsel are pleased with the current Settlement class participation rate,” the document reads. “With a month left before the Claim Form Deadline, Class Counsel anticipate the number of Claims will continue to increase.”

From the Dec. 8 data to the Jan. 14 deadline, claims more than tripled, rising roughly 204%.

Patrick M. Passarella, senior director at Kroll, reported in Thursday’s filing that by the opt-out and objection deadline of Dec. 30, there were no objections and 35 opt-outs. He also noted that the response from 47,140 people, or 6.5% of the total amount of people who received mailers, was significantly higher than what is typically seen in data breach settlements.

The settlement is expected to receive final approval next Thursday, on Jan. 29, at U.S. District Court for the District of Rhode Island in Providence.

An attorney for the plaintiffs did not respond to a request for comment by press time Thursday.

This story was originally published by the Rhode Island Current.

Researchers at URI and the state Department of Environmental Management to spend five years on a comprehensive study of Rhode Island’s wild turkey population
November 28 - January 2, 2026
Will the Rhode Island Senate remain divided? Plus, Helena Foulkes leans on a big name to raise more campaign cash
From restaurants to bakeries to dance studios, local business owners describe customer losses, creative pivots, and the hard-earned resilience they’ve needed to keep going since the westbound bridge shut down in late 2023
The closures are the latest in what is expected to be a wave of parish consolidations across Rhode Island
After ICE agents “wrongfully” detained a high school intern at a Providence courthouse, the state’s highest-ranking judge said the legal system will consider making virtual hearings more accessible