Rhode Island · verified official-source register

Rhode Island Privacy Enforcement Cases

1 approved, official-source case record from the 50-state register. Dates, amounts, legal context and disposition qualifications are supported by the cited evidence.

1 primary case-source link · 1 unique primary source URL

Last editorial review (targeted corrections): · Last link check (automated availability check):

Actual case links

Rhode Island case register

Each record cites an official Attorney General or state-agency source. Shared multistate amounts should not be summed as unique state penalties. Additional verification sources are identified when an amount has been reconciled.

Verified case 1 of 1

Equifax

Date
2019-07-22
Amount
Up to $425 million for consumers; $1 million for the State of Rhode Island
Legal basis
Deceptive Trade Practices Act

Why the action was brought

Equifax exposed social security numbers, names, dates of birth, addresses, credit card numbers, and in some cases driver’s license numbers affecting more than 147 million consumers, including about 500,000 Rhode Islanders. The company failed to maintain reasonable security, patch a known critical vulnerability, and replace monitoring software, allowing attackers to remain undetected for 76 days.

View Official Case Source ↗ (opens in a new tab)

This register contains approved, official-source privacy, data-breach and data-security enforcement records. Read any case-specific court-approval qualification; inclusion does not confirm payment or final judgment. Shared multistate amounts should not be summed as unique state penalties.

Educational information, not legal advice.

Back to Rhode IslandAll states

Original case-library snapshot: August 23, 2026. Original state-law research cutoff: August 25, 2026. Monetary-library update: September 16, 2026, not a new full 50-state research cutoff. Targeted Indiana and New Hampshire law review: October 19, 2026 only. Source inclusion does not independently confirm final court entry or payment.