Carruth Compliance Consulting

In December 2024, Carruth Compliance Consulting, an administrator for public school teachers' and employees' retirement plans, experienced a significant cyberattack. The breach, executed by Skira Team, compromised the sensitive data of over 40,000 individuals across multiple states including Social Security numbers, financial account information, driver’s license numbers, W-2s, medical billing, and tax filings. The data theft led to multiple class action lawsuits, loss of client confidence, and damaged the firm's credibility.

Source: https://therecord.media/thousands-of-public-school-workers-impacted-data-breach

TPRM report: https://scoringcyber.rankiteo.com/company/carruth-compliance

"id": "car947030625",
"linkid": "carruth-compliance",
"type": "Breach",
"date": "3/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 40000,
                        'industry': 'Financial Services',
                        'location': 'Multiple states',
                        'name': 'Carruth Compliance Consulting',
                        'type': 'Administrator for retirement plans'}],
 'data_breach': {'number_of_records_exposed': 40000,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'financial account information',
                                              'driver’s license numbers',
                                              'W-2s',
                                              'medical billing',
                                              'tax filings']},
 'date_detected': 'December 2024',
 'description': 'In December 2024, Carruth Compliance Consulting, an '
                "administrator for public school teachers' and employees' "
                'retirement plans, experienced a significant cyberattack. The '
                'breach, executed by Skira Team, compromised the sensitive '
                'data of over 40,000 individuals across multiple states '
                'including Social Security numbers, financial account '
                'information, driver’s license numbers, W-2s, medical billing, '
                'and tax filings. The data theft led to multiple class action '
                "lawsuits, loss of client confidence, and damaged the firm's "
                'credibility.',
 'impact': {'brand_reputation_impact': 'Loss of client confidence, damaged '
                                       "firm's credibility",
            'data_compromised': ['Social Security numbers',
                                 'financial account information',
                                 'driver’s license numbers',
                                 'W-2s',
                                 'medical billing',
                                 'tax filings'],
            'legal_liabilities': 'Multiple class action lawsuits'},
 'motivation': 'Data Theft',
 'regulatory_compliance': {'legal_actions': 'Multiple class action lawsuits'},
 'threat_actor': 'Skira Team',
 'title': 'Carruth Compliance Consulting Cyberattack',
 'type': 'Data Breach'}