Carruth Compliance Consulting is the third-party administrator that handles 403(b) and 457(b) retirement savings plan for many Oregon public employers, including Lane Community College. Carruth discovered suspicious activity on their computer systems. An investigation revealed that unauthorized access to Carruth’s network occurred in late December 2024, resulting in the compromise of sensitive employee data for Carruth’s clients, including LCC.
This data breach impacts all employees who have been employed by LCC since 2004, regardless of whether or not Carruth was actively managing your 403(b) or 457(b) retirement saving plans.
Frequently Asked Questions
This data breach impacts ALL employees who have been employed by LCC since 2004, regardless of whether or not Carruth was actively managing your 403(b) or 457(b) retirement saving plans.
According to Carruth, the company will NOT be notifying employees who have been impacted nor will it provide a list of affected employees to LCC. Please review next steps and how to access credit monitoring support below.
Information that was potentially shared includes employee names, social security numbers, dates of birth, pay information, and contribution amounts to 403(b) and 457(b) retirement savings accounts (not PERS).
Additionally, if you shared any information directly with Carruth in the management of your 403(b) or 457(b) retirement savings plans, that information, too, may have been compromised — information like beneficiaries, power of attorney, financial account information, driver’s license numbers, W-2 information, medical billing information and tax filings.
We are working with Carruth to understand the full scope of the breach and to ensure the company is taking appropriate steps to mitigate the impact to our employees.
You will NOT receive any notification from Carruth verifying that your information was compromised. Instead you should proactively take action:
- Enroll in credit monitoring and identity restoration services: Carruth is offering free credit monitoring and identity restoration services through IDX. To enroll, call IDX at 877-720-7895.
- Monitor your accounts: Regularly review your retirement savings plans, bank accounts, credit card statements and other financial accounts for any suspicious activity. If you see anything unusual, report it to your financial institution immediately.
- Check your credit reports: You're entitled to one free credit report annually from each of the three major credit reporting bureaus (Equifax, Experian and TransUnion). Visit www.annualcreditreport.com or call 1-877-322-8228 to order your free reports.
- Consider placing a fraud alert or credit freeze on your credit report: You can place a fraud alert or credit freeze on your credit report to help protect yourself from identity theft. See details below.
Fraud Alert: A fraud alert notifies creditors to verify your identity before issuing new credit. You can place an initial fraud alert (lasting one year) or an extended fraud alert (lasting seven years), if you're already a victim of identity theft.
Credit Freeze: A credit freeze prevents credit bureaus from releasing your credit report without your explicit consent. A credit freeze is designed to prevent credit, loans and services from being approved in a consumer's name without consent. However, consumers should be aware that using a credit freeze may delay, interfere with or prohibit the timely approval of any subsequent requests or applications they make regarding new loans, credit, mortgages or any other accounts involving the extension of credit.
To place a fraud alert or credit freeze, contact the three major credit reporting bureaus:
- Equifax: 1-888-298-0045
- Experian: 1-888-397-3742
- TransUnion: 1-800-916-8800
Advice for those impacted by identity theft: