Jan. 31, 2025
Dear KCSD staff,
This information about the Carruth incident was sent in an email to all staff on Jan. 21, 2025. This incident potentially impacts nearly all employees as well as retirees and former employees back to 2009.
Carruth Incident
Carruth Compliance Consulting is the third-party administrator that handles 403(b) retirement saving plans for many Oregon school districts, including Klamath County School District. Carruth discovered suspicious activity on their computer systems. An investigation revealed that unauthorized access to Carruth’s network occurred in late December 2024, resulting in the compromise of sensitive employee data for Carruth’s clients, including KCSD. Carruth is offering free credit monitoring services to those affected. Inquiries may be directed to Carruth at 877-720-7895, from 6 a.m. to 6 p.m. PST, Monday through Friday. https://www.ncompliance.com/ Carruth Notice of Data Security Event
Frequently Asked Questions
Am I impacted?
This data breach potentially impacts all employees who have been employed by KCSD between 2009 and today. To be on the safe side, we are assuming that all KCSD employees between 2009 and now have been impacted by this breach, and we encourage everyone to take the steps listed below.
What information was compromised?
The compromised information at Carruth may include employees’ name, Social Security number, and financial account information. In some cases, it could also include driver’s license number, and for those who may have applied for a hardship loan it could include W-2 information, medical billing information (but not medical records), tax filings.
What is KCSD doing?
We are working with Carruth to understand the full scope of the breach and to ensure they are taking appropriate steps to mitigate the impact on our employees. We are providing this FAQ and will continue to update it with the latest information as it becomes available.
What should I do?
- Enroll in Credit Monitoring and Identity Restoration Services: Carruth is offering free credit monitoring and identity restoration services through IDX. To enroll, please call IDX at (877)720-7895.
- Monitor Your Accounts: Regularly review your bank accounts, credit card statements, and other financial accounts for any suspicious activity. If you see anything unusual, report it to your financial institution immediately.
- Check Your Credit Reports: You are entitled to one free credit report annually from each of the three major credit reporting bureaus (Equifax, Experian, and TransUnion). Visit www.annualcreditreport.com or call 1-877-322-8228 to order your free reports.
- Consider Placing a Fraud Alert or Credit Freeze on Your Credit Report: You can place a fraud alert or credit freeze on your credit report to help protect yourself from identity theft. See details below.
- Report Any Suspicious Activity: If you suspect you are a victim of identity theft, report it to the Federal Trade Commission (FTC) at www.identitytheft.gov or 1-877-438-4338. You should also file a police report.
Fraud Alerts and Credit Freezes
- Fraud Alert: A fraud alert notifies creditors to verify your identity before issuing new credit. You can place an initial fraud alert (lasting one year) or an extended fraud alert (lasting seven years) if you are already a victim of identity theft.
- Credit Freeze: A credit freeze prevents credit bureaus from releasing your credit report without your explicit consent. This makes it harder for identity thieves to open accounts in your name.
How to place a fraud alert or credit freeze, contact the three major credit reporting bureaus:
Additional Resources
Federal Trade Commission (FTC): www.identitytheft.gov
KCSD’s Response
KCSD takes the security of your information very seriously. Upon learning of this even, we:
- Engaged with Carruth: We have been in direct communication with CCC to understand the incident and their response.
- Reviewed Internal Practices: We are assessing our data-sharing practices with third-party vendors to ensure continued security, including the consideration of new and/or additional precautions that may need to be taken to heighten information security.
- Notified Affected Individuals: This serves as part of our effort to notify all potentially affected KCSD employees. Please consider the credit monitoring services offered by Carruth.
