RIBridges firewall worked. But forensic report says hundreds of alarms went unnoticed by Deloitte.

A report describes how a cybercriminal group infiltrated Rhode Island’s RIBridges public benefits portal, remained undetected in the backend for five months, and exfiltrated gigabytes of residents’ data; despite hundreds of firewall alerts, the breach went unnoticed until the threat actor “Brain Cipher” claimed responsibility, prompting a CrowdStrike forensic review that found missed incident logs and oversight by system vendor Deloitte.