On January 13,  2025, we learned that Carruth Compliance Consulting, the third-party administrator of CSD’s 403(b) and 457(b) retirement savings plans, discovered suspicious activity on its computer systems on December 21, 2024 (the “Carruth Incident” or “Incident”). Carruth reported that an investigation revealed that sensitive employee data for Carruth’s clients, including CSD, was affected. Carruth’s customers include many Oregon school districts, educational service districts and other organizations. More information is available on Carruth's website.

Carruth reported that upon learning of the Incident, they began working with third-party specialists to investigate the activity, and then notified the Federal Bureau of Investigation. Carruth also engaged a sub-contractor to handle processing of information coming in from its clients. For the foreseeable future, no further retirement account transactions from CSD employees will be processed by Carruth.  We are in the process of transitioning to another provider for these services and will provide information about it in subsequent communications.