Carruth Incident
On January 13, 2025, we learned that Carruth Compliance Consulting, the third-party administrator of Gervais School District 1’s 403(b) and 457(b) retirement savings plans, discovered suspicious activity on its computer systems on December 21, 2024 (the “Carruth Incident” or “Incident”). Carruth reported that an investigation revealed that sensitive employee data for Carruth’s clients, including Gervais SD, was affected. Carruth’s customers include many Oregon school districts, educational service districts and other organizations.
Carruth reported that upon learning of the Incident, they began working with third-party specialists to investigate the activity, and then notified the Federal Bureau of Investigation. Carruth also engaged a sub-contractor to handle processing of information coming in from its clients. For the foreseeable future, no further retirement account transactions from Gervais SD employees will be processed by Carruth. We are in the process of transitioning to another provider for these services and will provide information about it in subsequent communications.
Communication has been sent by mail to affected individuals that further details the incident and credit monitoring protection being offered.
Additional information on the Gervais School District website.