Skip To Main Content

Carruth Compliance

Carruth Compliance Consulting is the third-party administrator that handles 403(b) and 457(b) retirement savings plan for many Oregon school districts, including Woodburn School District. Carruth discovered suspicious activity on their computer systems. An investigation revealed that unauthorized access to Carruth’s network occurred in late December 2024, resulting in the compromise of sensitive employee data for Carruth’s clients, including WSD.

This data breach impacts all employees who have been employed by WSD since 2009, regardless of whether or not Carruth was actively managing your 403(b) or 457(b) retirement saving plans. 

Carruth Notice of Data Security Event

Carruth Compliance

Was my data compromised?

This data breach impacts ALL employees who have been employed by BSD since 2009, regardless of whether or not Carruth was actively managing your 403(b) or 457(b) retirement saving plans. 

According to Carruth, the company will NOT be notifying employees who have been impacted nor will it provide a list of affected employees to BSD. Please review next steps and how to access credit monitoring support below.

What is WSD doing?

Because we do not host the system that was breached, we are alerting all employees of this breach and directing them on where to get additional information and assistance.

You should have received information about this breach and options for next steps.

Should I be on the alert for scams?

Yes, you should be on alert. Scammers may try to target you through social media posts, social media ads, emails and the like. Be cautious about clicking on unknown links. Always visit legitimate websites directly, never through a link in a text message or email.

What should  I do?

You should proactively take action:

  • Enroll in credit monitoring and identity restoration services: Carruth is offering free credit monitoring and identity restoration services through IDX. To enroll, call IDX at 877-720-7895. After you make this call, IDX will send you an email with further instructions about actions to take on their website. Know that during this online process, you'll need to enter your social security number and other personal information. You will not be asked to give this information over the phone.
  • Monitor your accounts: Regularly review your retirement savings plans, bank accounts, credit card statements and other financial accounts for any suspicious activity. If you see anything unusual, report it to your financial institution immediately.
  • Check your credit reports: You're entitled to one free credit report annually from each of the three major credit reporting bureaus (Equifax, Experian and TransUnion). Visit www.annualcreditreport.com or call 1-877-322-8228 to order your free reports.  
  • Consider placing a fraud alert or credit freeze on your credit report: You can place a fraud alert or credit freeze on your credit report to help protect yourself from identity theft. See details below.

Fraud alerts and credit freezes

Fraud Alert: A fraud alert notifies creditors to verify your identity before issuing new credit. You can place an initial fraud alert (lasting one year) or an extended fraud alert (lasting seven years), if you're already a victim of identity theft.

Credit Freeze: A credit freeze prevents credit bureaus from releasing your credit report without your explicit consent. A credit freeze is designed to prevent credit, loans and services from being approved in a consumer's name without consent. However, consumers should be aware that using a credit freeze may delay, interfere with or prohibit the timely approval of any subsequent requests or applications they make regarding new loans, credit, mortgages or any other accounts involving the extension of credit. 

To place a fraud alert or credit freeze, contact each of the three major credit reporting bureaus:

Additional resources

Advice for those impacted by identity theft: