# Rhode Island Finalizes Deloitte Settlement

The State of Rhode Island finalized a settlement agreement with Deloitte Consulting LLP on April 24, 2026, resolving issues related to the December 2024 RIBridges cybersecurity incident. The settlement includes a **$12 million direct financial recovery** and an additional **$6 million allocated for system enhancements and ongoing support services** to restore and secure critical state benefits systems. This agreement aims to safeguard taxpayer interests while ensuring the continuity and resilience of essential state IT infrastructure.

- Procurement professionals should note the financial recovery and reinvestment in system improvements as a model for addressing cybersecurity incident impacts through contractual settlements.
- The involvement of Deloitte Consulting LLP as a contractor highlights the importance of vendor accountability and post-incident support in state IT procurements.
- Agencies managing critical benefits systems may consider enhanced cybersecurity and support service requirements in future contracts to mitigate operational risks.
- This settlement underscores the value of integrating remediation and enhancement provisions in vendor agreements following cybersecurity events.

**Jurisdictions:** sled
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** April 27, 2026

### Government Entities
- State of Rhode Island
- Department of Administration

### Vendors
- Deloitte Consulting LLP (contractor)

### Key Quotes
> This agreement reflects a deliberate effort to protect Rhode Island taxpayers while ensuring the State has the resources needed to move forward.
> — Dan McKee, Governor

### Sources
- [Governor McKee Announces Finalization of Settlement with Deloitte Related to RIBridges Cybersecurity Incident | Governor's Office, State of Rhode Island](https://governor.ri.gov/press-releases/governor-mckee-announces-finalization-settlement-deloitte-related-ribridges) - RI