Thousands of current and former Oregon school staff were affected by a data breach at a third-party retirement plan administrator.
OREGON, USA — A cybersecurity breach at an Oregon-based retirement plan administrator has exposed sensitive data of thousands of current and former school employees across multiple Portland-area school districts, officials announced Wednesday.
Carruth Compliance Consulting, which manages 403(b) retirement savings plans for numerous Oregon school districts, discovered unauthorized access to their computer systems in late December 2024. The Tigard-based company’s breach impacts employees from Portland Public Schools, Beaverton School District, Hillsboro School District and other public entities.
The breach affects all current Beaverton School District employees and former staff members dating back to 2009. Other impacted districts face a similar scope of exposure, according to school officials.
“Our biggest challenge is reaching former employees to alert them about necessary steps to protect their identity,” said Shellie Bailey-Shah, Beaverton School District’s …