Carruth Compliance Consulting (Carruth) is the third-party administrator that handles 403(b) and 457(b) retirement savings plans for many Oregon school districts, including Jefferson County School District 509J. Carruth recently discovered suspicious activity on their computer systems. An investigation revealed that unauthorized access to Carruth’s network occurred in late December 2024, resulting in the compromise of sensitive employee data for Carruth’s clients, including 509J. Below is a link to Carruth’s notice about the event.
Carruth Notice of Data Security Event
Note: This is not related to the PowerSchool Data Breach we messaged about in early January.
FREQUENTLY ASKED QUESTIONS
Who has been impacted? The breach impacts current and former 509J employees dating back to 2008 who have or previously had 403(b) or 457(b) accounts, regardless of whether they contributed their own funds.
What information was compromised? The compromised information at Carruth may include employees’ names, Social Security numbers and financial account information. In some cases, it could also include driver’s license numbers and, for those who may have applied for a hardship loan, it could include W-2 information, medical billing information (but not medical records), and tax filings.
What is 509J doing?
- We are working with Carruth to understand the full scope of the breach and to ensure they are taking appropriate steps to mitigate the impact on our employees.
- We are providing this FAQ and will continue to update it with the latest information as it becomes available.
What should I do?
- Enroll in Credit Monitoring and Identity Restoration Services: Carruth is offering free credit monitoring and identity restoration services through IDX. To enroll, please call IDX at (877) 720-7895.
- Monitor Your Accounts: Regularly review your bank accounts, credit card statements and other financial accounts for any suspicious activity. If you see anything unusual, report it to your financial institution immediately.
- Check Your Credit Reports: You are entitled to one free credit report annually from each of the three major credit reporting bureaus (Equifax, Experian and TransUnion). Visit the Annual Credit Report website, or call 1-877-322-8228 to order your free reports.
- Consider Placing a Fraud Alert or Credit Freeze on your Credit Report: You can place a fraud alert or credit freeze on your credit report to help protect yourself from identity theft. See details below.
- Report Any Suspicious Activity: If you suspect you are a victim of identity theft, report it to the Federal Trade Commission (FTC) | 1-877-ID-THEFT (1-877-438-4338). You should also file a police report.
Fraud Alerts and Credit Freezes
- Fraud Alert: A fraud alert notifies creditors to verify your identity before issuing new credit. You can place an initial fraud alert (lasting one year) or an extended fraud alert (lasting seven years) if you are already a victim of identity theft.
- Credit Freeze: A credit freeze prevents credit bureaus from releasing your credit report without your explicit consent. This makes it harder for identity thieves to open accounts in your name.
How to place a fraud alert or credit freeze? Contact the three major credit reporting bureaus to place a fraud alert or credit freeze:
- Equifax | 1-888-298-0045
- Experian |1-888-397-3742
- TransUnion | 1-800-916-8800
Additional Resource