Corvallis School District 509J
ent_6e625a593b78b8822e4a9c7c
Disclosures
7
State AG · 7 jurisdictions
Multi-filing incidents
3
incidents joining 2+ filings here
Max affected reported
4,834
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Corvallis School District 509J
- Normalized
- corvallis school district 509j— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- csd509j.net
Disclosure history (7)newest first
- New Hampshire State AGas reporting2025-02-28
Carruth Compliance Consulting, a third-party administrator for Corvallis School District 509J retirement plans, experienced a data security incident on or about December 21, 2024. The breach potentially exposed personal information of approximately 1 New Hampshire resident. Carruth engaged third-party specialists and notified the FBI. The District notified the NH Attorney General on February 28, 2025, and offered complimentary credit monitoring and identity theft protection services to affected individuals.
- Nebraska State AGas reporting2025-02-28
Corvallis School District 509J (Oregon) notified affected individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, affecting names, SSNs, financial account info, driver's licenses, and W-2s. District discovered the incident on January 13, 2025, and sent notification letters on February 28, 2025, offering credit monitoring.
- Maryland State AGas victim2025-02-28
Corvallis School District 509J notified the Maryland AG of a data breach affecting its third-party administrator, Carruth Compliance Consulting. The incident, occurring on Dec 21, 2024, involved unauthorized acquisition of personal information (SSNs, driver's licenses, financial accounts) for approximately 2 Maryland residents. CSD engaged forensic specialists, notified the FBI, and offered credit monitoring services to affected individuals.
- Oregon State AGas victim2025-02-28
Corvallis School District 509J reported a data breach to the Oregon Attorney General. The breach was reported on 2025-02-28. The breach occurred during 12/21/2024 - 12/21/2024. The breach was discovered on 2/24/2025. 4,834 individuals were affected. Notice was sent on 2/28/2025.
- Vermont State AGas victim2025-02-28
Corvallis School District 509J notified Vermont residents of a data breach involving third-party vendor Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, and was discovered on January 13, 2025. Affected data includes names, Social Security numbers, financial account information, and potentially driver's license numbers, W-2s, and medical billing information for employees and beneficiaries. The district engaged forensic specialists, notified the FBI, and is offering credit monitoring services.
- Massachusetts State AGas victim2025-02-28
Corvallis School District 509J reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-28. 4 Massachusetts residents were affected.
- Montana State AGas reporting2025-02-28
Corvallis School District 509J notified individuals of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, driver's licenses, W-2s, and medical billing data. The FBI was notified, and affected individuals were offered credit monitoring.
Supply-chain cascadesreviewed and confirmed
- Corvallis School District 509J’s filing is one of at least 65 in the Carruth Compliance Consulting supply-chain incident (2025).