HackingSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Carruth Compliance Consulting
bd_facf1bcc24c00558 · schema v1 · pii pii-v1
Full breach record for Carruth Compliance Consulting →Chemeketa Community College notified the NH Attorney General of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access to personal information (including SSNs, driver's licenses, W-2s, and medical billing info) occurred on or about Dec 21, 2024. Chemeketa CC was notified on Jan 13, 2025, and offered credit monitoring to affected employees.
This filing is one of 11 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_00b4ec7a8e0396c0New Hampshire State AGfiled 2025-02-28Verified
- bd_196889d710f581d2New Hampshire State AGfiled 2025-02-28Candidate
- bd_1f86079bc5344c50New Hampshire State AGfiled 2025-02-28Candidate
- bd_b9147a94551bd5e4New Hampshire State AGfiled 2025-02-28Candidate
Show 6 more filings ↓Show fewer ↑up to 46d gap
- bd_703c9e7047c738b2New Hampshire State AGfiled 2025-03-03(3d gap)Candidate
- bd_eb1f680179752a02New Hampshire State AGfiled 2025-03-03(3d gap)Verified
- bd_f8ba4120d456fdc9New Hampshire State AGfiled 2025-03-03(3d gap)Verified
- bd_8b2ba983a95b99c5New Hampshire State AGfiled 2025-03-12(12d gap)Verified
- bd_dc44396ce0d37690New Hampshire State AGfiled 2025-03-12(12d gap)Verified
- bd_122f5c003faf3cafOregon State AGfiled 2025-01-13(46d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/chemeketa-community-college-carruth-compliance-consulting-20250228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- 5f9d4f0d87e67a98cdc04e5ab50948605fc0a8aa7526ffe01a52102ddee36ed5
Reporting entity
- Name
- Linn-Benton Community Collegenorm: linn benton community college
- Domain
- linnbenton.edu
Victim entity
- Name
- Carruth Compliance Consultingnorm: carruth compliance consulting
- Domain
- ncompliance.com
Incident
- Discovered
- Jan 13, 2025
- Materiality determined
- Feb 24, 2025
- Notification sent
- Feb 28, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of InvestigationFiled notification with New Hampshire Attorney General Consumer Protection Bureau
- Third party
- via Carruth Compliance Consulting
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(46 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.