Carruth Compliance Consulting

North Clackamas School District notified affected individuals on March 12, 2025, regarding a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, driver's license numbers, and W-2/medical billing data. Carruth engaged third-party investigators and notified the FBI. The District is offering 24 months of credit monitoring via IDX.

Reynolds School District #7 notified affected individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, driver's license numbers, and W-2s. Carruth engaged FBI and forensic specialists. The District offers 12 months of credit monitoring via IDX.

David Douglas School District (Oregon) notified affected individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, exposing names, SSNs, financial account info, and driver's license numbers. Carruth engaged forensic specialists and notified the FBI. DDSD is offering 24 months of credit monitoring via IDX. Notification letters dated March 12, 2025.

David Douglas School District notified Montana residents of a data breach involving third-party administrator Carruth Compliance Consulting. The incident, occurring on December 21, 2024, exposed names, SSNs, financial account info, and potentially driver's licenses and W-2s. Carruth engaged investigators and notified the FBI. District offers 24 months of credit monitoring via IDX.

Carruth Compliance Consulting is a company dedicated to consulting on compliance challenges related to Tax-Advantaged Benefit Program administration. It specializes in the administration of 403(b) and 457(b) retirement plans. The company helps employers and financial institutions navigate complex tax laws and compliance regulations relating to benefit plans, providing compliance consulting, plan administration, and ongoing compliance support.

Bend-La Pine School District notified affected individuals of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, and driver's license numbers. Notices were sent February 28, 2025, offering credit monitoring.

Centennial School District notified affected individuals of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, and other PII of employees and beneficiaries. Centennial engaged forensic specialists, notified the FBI, and is offering 12 months of credit monitoring via IDX.

Multnomah Education Service District notified of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on Dec 21, 2024, affecting personal info including SSNs, financial accounts, and driver's licenses of employees/beneficiaries. FBI notified. Credit monitoring offered.

Carruth Compliance Consulting, a third-party administrator for retirement plans, experienced a data security incident on December 21, 2024, where personal information may have been acquired without authorization. The incident affected approximately one Maryland resident. Affected data may include names, Social Security numbers, driver's license numbers, financial account information, and medical billing information. Carruth engaged third-party specialists and notified the FBI. Oregon City School District, which uses Carruth's services, notified affected employees and offered identity protection services.

North Wasco County School District 21 notified affected individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, and driver's license numbers. Notices were sent February 28, 2025, offering credit monitoring.

Carruth Compliance Consulting, a third-party administrator for Corvallis School District 509J retirement plans, experienced a data security incident on or about December 21, 2024. The breach potentially exposed personal information of approximately 1 New Hampshire resident. Carruth engaged third-party specialists and notified the FBI. The District notified the NH Attorney General on February 28, 2025, and offered complimentary credit monitoring and identity theft protection services to affected individuals.

West Linn-Wilsonville School District notified affected individuals on February 28, 2025, regarding a data security incident involving third-party administrator Carruth Compliance Consulting. The incident occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, driver's license numbers, and W-2s. Carruth engaged third-party specialists and notified the FBI. The District is offering 12 months of credit monitoring via IDX.

Lane Community College notified individuals of a data breach involving its third-party administrator, Carruth Compliance Consulting. The incident, occurring on Dec 21, 2024, exposed names, SSNs, financial account info, and potentially driver's licenses and W-2s. Affected individuals are offered 12 months of credit monitoring.

Bend-La Pine School District notified affected individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, affecting personal information including names, SSNs, financial account numbers, driver's license numbers, and W-2/medical billing data. Bend-La Pine is offering 12 months of credit monitoring via IDX.

Springfield Public Schools notified Montana residents of a data breach involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on Dec 21, 2024, exposing names, SSNs, financial account info, and potentially driver's licenses and W-2s. FBI was notified; credit monitoring offered.

Corvallis School District 509J (Oregon) notified affected individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, affecting names, SSNs, financial account info, driver's licenses, and W-2s. District discovered the incident on January 13, 2025, and sent notification letters on February 28, 2025, offering credit monitoring.

Linn-Benton Lincoln ESD notified affected individuals of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, and other PII of current/former employees and beneficiaries. Carruth engaged forensic specialists and notified the FBI. Linn-Benton Lincoln ESD is offering 24 months of credit monitoring via IDX.

Lane Community College notified Nebraska AG that its third-party administrator, Carruth Compliance Consulting, experienced a data security incident on December 21, 2024. The breach potentially exposed employee names, SSNs, financial account numbers, driver's license numbers, W-2s, and medical billing info. Lane Community College offered 12 months of credit monitoring via IDX. The FBI was notified. The notification letter is dated February 28, 2025.

Carruth Compliance Consulting, a third-party administrator for retirement plans, experienced a data security incident on December 21, 2024, where personal information was acquired without authorization. The incident affected approximately four Maryland residents, involving names, Social Security numbers, driver's license numbers, financial account information, and medical billing information. Carruth engaged third-party specialists and notified the FBI. Linn-Benton Lincoln ESD, a client, notified affected employees and offered identity protection services.

InterMountain Education Service District (ID) notified affected individuals of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, exposing names, SSNs, financial account info, and potentially driver's license and W-2 data. ID notified Carruth on January 13, 2025, and sent general notification letters on February 28, 2025, offering 12 months of credit monitoring via IDX.

Multnomah Education Service District (MESD) notified affected individuals of a data security incident involving its third-party administrator, Carruth Compliance Consulting. On December 21, 2024, unauthorized access occurred, potentially exposing names, Social Security numbers, financial account information, driver's license numbers, W-2s, and medical billing data. MESD discovered the incident on January 13, 2025, and sent notification letters on February 28, 2025, offering 12 months of credit monitoring via IDX.

Central Oregon Community College notified affected individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, driver's licenses, W-2s, and medical billing data. Notices were sent February 28, 2025, offering credit monitoring.

Junction City School District notified individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, and driver's licenses. FBI was notified; credit monitoring offered.

Chemeketa Community College notified affected individuals of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, exposing names, SSNs, financial account info, driver's licenses, and medical billing data. Notifications were sent February 28, 2025, offering 24 months of credit monitoring via IDX.

Lincoln County School District notified affected individuals of a data security incident involving its third-party administrator, Carruth Compliance Consulting. The incident, occurring on December 21, 2024, potentially exposed names, SSNs, financial account info, and other PII of current/former employees and beneficiaries. FBI was notified; credit monitoring offered.