Canby School District
ent_cb4c35c4ec46d2976fd43f98
Disclosures
6
State AG · 6 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
5,594
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Canby School District
- Normalized
- canby school district— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- canby.k12.or.us
Disclosure history (6)newest first
- Maryland State AGas victim2025-03-04
Canby School District notified the Maryland Attorney General of a data security incident involving its third-party vendor, Carruth Compliance Consulting. On December 21, 2024, unauthorized access occurred at Carruth, which administers retirement plans for Canby employees. Canby was notified on January 13, 2025. The incident potentially affected 1 Maryland resident, exposing names, Social Security numbers, driver's license numbers, financial account information, and medical billing information. Canby engaged investigators, notified the FBI, and offered credit monitoring and identity theft protection services to affected individuals.
- Oregon State AGas victim2025-03-04
Canby School District reported a data breach to the Oregon Attorney General. The breach was reported on 2025-03-04. The breach occurred during 12/21/2024 - 12/21/2024. The breach was discovered on 2/25/2025. 5,594 individuals were affected. Notice was sent on 2/28/2025.
- Massachusetts State AGas victim2025-03-04
Canby School District reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-04. 2 Massachusetts residents were affected.
- Montana State AGas reporting2025-03-03
Canby School District 86 notified individuals of a data security incident involving its third-party administrator, Carruth Compliance Consulting. Unauthorized access occurred on December 21, 2024, potentially exposing names, SSNs, financial account info, and driver's license numbers. The FBI was notified, and complimentary credit monitoring via IDX is offered.
- Indiana State AGas victim2025-02-28
Canby School District reported a data breach to the Indiana Attorney General. The breach occurred on 2024-12-21 and was reported on 2025-02-28. 2 Indiana residents were affected. 5,594 individuals affected in total.
- Nebraska State AGas victim2025-02-28
Canby School District 86 (OR) notified Nebraska AG of a data security incident involving third-party administrator Carruth Compliance Consulting. Unauthorized access occurred on or about December 21, 2024. Affected data includes names, SSNs, financial account info, driver's license numbers, W-2s, and medical billing info. District notified FBI and offers 12 months of credit monitoring via IDX. Notification letter dated February 28, 2025.
Supply-chain cascadesreviewed and confirmed
- Canby School District’s filing is one of at least 65 in the Carruth Compliance Consulting supply-chain incident (2025).