In December 2024, Carruth Compliance Consulting, an administrator for public school teachers' and employees' retirement plans, experienced a significant cyberattack. The breach, executed by Skira Team, compromised the sensitive data of over 40,000 individuals across multiple states including Social Security numbers, financial account information, driver’s license numbers, W-2s, medical billing, and tax filings. The data theft led to multiple class action lawsuits, loss of client confidence, and damaged the firm's credibility.
Source: https://therecord.media/thousands-of-public-school-workers-impacted-data-breach
TPRM report: https://scoringcyber.rankiteo.com/company/carruth-compliance
"id": "car947030625",
"linkid": "carruth-compliance",
"type": "Breach",
"date": "3/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 40000,
'industry': 'Financial Services',
'location': 'Multiple states',
'name': 'Carruth Compliance Consulting',
'type': 'Administrator for retirement plans'}],
'data_breach': {'number_of_records_exposed': 40000,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'financial account information',
'driver’s license numbers',
'W-2s',
'medical billing',
'tax filings']},
'date_detected': 'December 2024',
'description': 'In December 2024, Carruth Compliance Consulting, an '
"administrator for public school teachers' and employees' "
'retirement plans, experienced a significant cyberattack. The '
'breach, executed by Skira Team, compromised the sensitive '
'data of over 40,000 individuals across multiple states '
'including Social Security numbers, financial account '
'information, driver’s license numbers, W-2s, medical billing, '
'and tax filings. The data theft led to multiple class action '
"lawsuits, loss of client confidence, and damaged the firm's "
'credibility.',
'impact': {'brand_reputation_impact': 'Loss of client confidence, damaged '
"firm's credibility",
'data_compromised': ['Social Security numbers',
'financial account information',
'driver’s license numbers',
'W-2s',
'medical billing',
'tax filings'],
'legal_liabilities': 'Multiple class action lawsuits'},
'motivation': 'Data Theft',
'regulatory_compliance': {'legal_actions': 'Multiple class action lawsuits'},
'threat_actor': 'Skira Team',
'title': 'Carruth Compliance Consulting Cyberattack',
'type': 'Data Breach'}