24-Hour Crisis Line: (503) 325-5724

Carruth Consulting Compliance Data Breach

Updated Wednesday, February 5th, 2025

Who is affected? 

This data breach affects current and former CBH employees.

What happened? 

On December 21, 2024, Clatsop Behavioral Health’s third-party administrator for its 403(b) retirement savings plans, Carruth Compliance Consulting (“CCC”), discovered suspicious activity affecting its computer systems. Upon investigation, CCC determined that their computer systems had been accessed without authorization and that certain files containing personal information had been copied from those systems between December 19, 2024, and December 26, 2024. CCC investigated the incident, notified the Federal Bureau of Investigation, and notified Clatsop Behavioral Healthcare its employees had been affected on January 30, 2025.

Carruth Notice of Data Security Event

What information was involved? 

The personal information potentially affected by this incident includes employee names and a combination of other information including Social Security number and financial account information. In some circumstances, the information may include individuals' driver's license numbers, W-2 information, medical billing information (but not medical records), and tax filings.

What are we doing? 

Clatsop Behavioral Healthcare values your privacy and deeply regrets that this incident occurred. We have confirmed CCC will provide all affected individuals with access to credit monitoring and identity restoration services through IDX, free of charge. Please see the information below about enrolling. In addition, Clatsop Behavioral Healthcare is working with CCC to transition the administration of its retirement savings plans to a new administrator and conducting a thorough review of security measures designed to prevent such an incident from reoccurring.

What can you do? 

• Enroll in Credit Monitoring and Identity Restoration Services: CCC is offering free credit monitoring and identity restoration services through IDX. To enroll, please call IDX at (877) 720-7895.
• Monitor Your Accounts: Remain vigilant for identity theft and fraud by regularly reviewing your bank accounts, credit card statements, and other financial accounts for any suspicious activity. If you see anything unusual, report it to your financial institution immediately.
• Check Your Credit Reports: You are entitled to one free credit report annually from each of the three major credit reporting bureaus (Equifax, Experian, and TransUnion).Visit www.annualcreditreport.com or call 1-877-322-8228 to order your free reports. You may also directly contact the credit reporting bureaus.
• Consider Placing a Fraud Alert or Credit Freeze on your Credit Report: You may place an initial or extended “fraud alert” or “credit freeze” on your credit report at no cost to help protect yourself from identity theft. See details below.
• Report Any Suspicious Activity: If you suspect you are a victim of identity theft, report it to the Federal Trade Commission (FTC) at www.identitytheft.gov or 1-877-ID-THEFT (1-877-438-4338).You should also file a police report.
• Review CBH Frequently Asked Questions on the website or intranet.

For More Information 

For further information about this incident, feel free to contact Juli Knapp at julik@clatsopbh.org or Brady Backstrom at bradyb@clatsopbh.org.

You may review CCC’s notice about this incident at: https://www.ncompliance.com/ or call CCC’s contact for more information at (877) 720-7895, Monday through Friday, from 6:00 am to 6:00 pm Pacific Standard Time, excluding major US holidays.