Carruth Data Incident Information (Updated Jan. 16, 2025)

  • Carruth Compliance Consulting (Carruth) is the third-party administrator that handles 403(b) and 457(b) retirement savings plans for employees of most Oregon school districts and including the West Linn-Wilsonville School District. Carruth recently discovered suspicious activity on their computer systems, and an investigation revealed that unauthorized access to Carruth’s network occurred in late December 2024. This unauthorized access resulted in the compromise of sensitive employee data for Carruth’s clients. On Jan. 15, the District learned of the significance of this incident and that West Linn-Wilsonville employees may be impacted.

    You can learn more about the data security event by reading Carruth’s Notice. If you have immediate questions, please call the IDX Call Center at 877-390-8299.

    Who does this impact?

    This data incident potentially impacts all employees who have been employed by West Linn-Wilsonville between 2004 and today. To be on the safe side, we are assuming that all WLWV employees between 2004 and now have been impacted by this incident, and we encourage everyone to take the steps listed below. 

    What information was compromised?

    The affected information at Carruth may include employees’ name, Social Security number, and financial account information. In some cases, it could also include driver's license number, and for those who may have applied for a hardship loan it could include W-2 information, medical billing information (but not medical records), and tax filings.

    What is West Linn-Wilsonville doing?

    We are working with Carruth to understand the full scope of the incident and to ensure they are taking appropriate steps to mitigate the impact on our employees. Please keep in mind that because Carruth is a third-party company, the district does not have control of or access to their system.

    What should I do if I think I may have been impacted?

    • Enroll in Credit Monitoring and Identity Restoration Services: Carruth is offering free credit monitoring and identity restoration services through IDX. To enroll, please call IDX at (877) 720-7895.
    • Monitor Your Accounts: Regularly review your bank accounts, credit card statements, and other financial accounts for any suspicious activity. If you see anything unusual, report it to your financial institution immediately.
    • Check Your Credit Reports: You are entitled to one free credit report annually from each of the three major credit reporting bureaus (Equifax, Experian, and TransUnion). Visit www.annualcreditreport.com or call 1-877-322-8228 to order your free reports.  
    • Consider Placing a Fraud Alert or Credit Freeze on your Credit Report: You can place a fraud alert or credit freeze on your credit report to help protect yourself from identity theft. See details below.
    • Report Any Suspicious Activity: If you suspect you are a victim of identity theft, report it to the Federal Trade Commission (FTC) at www.identitytheft.gov or 1-877-ID-THEFT (1-877-438-4338). You should also file a police report.


    Fraud Alerts and Credit Freezes

    • Fraud Alert: A fraud alert notifies creditors to verify your identity before issuing new credit. You can place an initial fraud alert (lasting one year) or an extended fraud alert (lasting seven years) if you are already a victim of identity theft.
    • Credit Freeze: A credit freeze prevents credit bureaus from releasing your credit report without your explicit consent. This makes it harder for identity thieves to open accounts in your name.                                                                                


    How to Place a Fraud Alert, Credit Freeze, Contact Three Major Credit Bureaus


    Additional Resources

    Federal Trade Commission (FTC): www.identitytheft.gov