Multnomah Education Service District (Oregon) notified the Maryland Attorney General of a data breach involving its third-party administrator, Carruth Compliance Consulting. The incident, occurring around December 21, 2024, exposed personal information of approximately 5 Maryland residents, including names, SSNs, driver's license numbers, financial account info, and medical billing data. Carruth engaged third-party specialists and notified the FBI. Multnomah notified affected individuals on February 28, 2025, offering 12 months of credit monitoring and identity theft protection via IDX.
Affected (this filing): 5