Deloitte

01. Findings

Deloitte provides extensive cybersecurity and digital trust services, including identity management, data protection, and compliance solutions ^[15]. Its CIR3 offering supports incident response and recovery across global capabilities ^[16]. However, the firm experienced a significant December 2024 ransomware attack on the RI Bridges system, exposing sensitive personal and financial data of over 650,000 individuals ^[17]. Deloitte faced criticism for delayed notification and settled a class action lawsuit in October 2025 ^[18]. A May 2025 threat actor claim further underscores persistent security vulnerabilities ^[19]. Despite these incidents, Deloitte maintains compliance frameworks and conducts third-party audits for clients ^[20].

02. Events

• [breach] May 2025 Threat Actor Claim

  Threat actor "303" claimed responsibility for a significant incident, though Deloitte clarified it affected a client's isolated system.

  May 30, 2025, 12:00 AM · Source

• [breach] RI Bridges Ransomware Attack

  December 2024 ransomware attack compromised over 650,000 individuals' data, leading to a $7M state settlement and class action resolution.

  Dec 5, 2024, 12:00 AM · Source

• [legal] PCAOB Accounting Deficiencies Fines

  Ongoing regulatory scrutiny includes multiple PCAOB fines for accounting fraud or deficiencies across various Deloitte entities.

  - · Source

03. Company

Deloitte is a multinational professional services network founded in 1845 and headquartered in London, UK ^[4]. It operates as one of the "Big Four" firms, providing audit, consulting, financial advisory, risk advisory, tax, and legal services globally ^[5]. The firm employs over 415,000 professionals across more than 150 countries ^[6]. Key leadership includes Chairperson Anna Marks and CEO Joseph B. Ucuzoglu ^[7]. Deloitte serves 100% of the Fortune 100 and Fortune 500 software companies through its specialized technology sectors ^[8]. The organization is structured under Deloitte Touche Tohmatsu Limited (DTTL), a UK private company limited by guarantee ^[9].

04. Product

Deloitte offers a broad portfolio of professional services, including management consulting, risk advisory, and digital transformation solutions ^[10]. Its Software, Services, and Platforms sector supports enterprise applications, SaaS, cloud platforms, and AI technologies ^[11]. Deloitte Digital provides platform development and modernization services, including CPQ and subscription management implementations ^[12]. The firm also delivers Cyber Incident Readiness, Response, and Recovery (CIR3) services to help clients manage cybersecurity threats ^[13]. Additionally, Deloitte has developed production-ready AI solutions like GovConnect.ai to accelerate secure software development and IT modernization ^[14].

05. Recent News

Recent news highlights Deloitte's involvement in a major December 2024 ransomware attack on Rhode Island's RI Bridges system, leading to a $7 million state settlement and a resolved class action lawsuit ^[21]. The breach compromised sensitive data for over 650,000 residents, with Deloitte facing scrutiny over delayed notification ^[22]. In May 2025, a threat actor claimed responsibility for another significant incident, though Deloitte clarified it affected a client's isolated system ^[23]. The firm also faces ongoing regulatory scrutiny, including PCAOB fines for accounting deficiencies ^[24]. Despite these challenges, Deloitte continues to receive industry recognitions, such as a 2026 IDC MarketScape Leader award ^[25].

07. Vendor response

Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.

08. Assessment history

1. 8/12/2026, 6:22:32 AM · High · 100

Risk delta is hidden until two stored snapshots can be compared.

09. Targeted questions

10. Sources

1. [1] Deloitte faces High Risk due to a major December 2024 ransomware attack on the RI Bridges system, compromising over 650,000 individuals' sensitive data and resulting in a $7 million state settlement and class action resolution Rhode Island Finalizes $12 Million Settlement With Deloitte Consulting Over RIBridges Cyberattack
2. [2] A May 2025 threat actor claim further highlights ongoing cybersecurity challenges The Story Behind Deloitte's 2025 Breach
3. [3] While Deloitte maintains robust security service offerings and compliance frameworks, the scale of the recent breach, delayed notification, and significant legal/regulatory fallout warrant a High Risk classification State announces $7 million settlement with contractor Deloitte over RIBridges cyber breach
4. [4] Deloitte is a multinational professional services network founded in 1845 and headquartered in London, UK Deloitte
5. [5] It operates as one of the "Big Four" firms, providing audit, consulting, financial advisory, risk advisory, tax, and legal services globally Deloitte Company Overview and Services | PDF | Business Economics | Finance (General)
6. [6] The firm employs over 415,000 professionals across more than 150 countries Deloitte Consulting Headquarters | SalesTools AI