RIBridges firewall worked. But forensic report says hundreds of alarms went unnoticed by Deloitte.
Briefly

A cybercriminal group compromised Rhode Island's public benefits portal, breaching the network for five months and transferring large volumes of personal data. Despite triggering alerts, Deloitte, the system's vendor, did not recognize the breach until it was publicly claimed by the threat actor. Governor Dan McKee commented on Deloitte's oversight, emphasizing the need for accountability. A subsequent forensic report revealed that Deloitte may have overlooked critical incident logs, raising questions about the firm's cybersecurity measures and responsibilities in safeguarding sensitive information.
Deloitte missed some issues that we certainly hold them responsible for. We also want to make sure that people know that we will pursue all avenues in our efforts to ensure accountability.
Read at Databreaches
[
|
]