Gladstone School District and Carruth Consulting Report Data Breach

Gladstone School District, working alongside its partner Carruth Compliance Consulting, formally reported a data security incident to the Maryland Attorney General on February 28, 2025. The nature of the breach itself remains unspecified in public filings, but it involved the unauthorized access or disclosure of highly sensitive personal data managed by these entities. Educational institutions and their third-party administrators like Carruth Compliance Consulting often handle extensive records for employees and participants, making them targets for cyber incidents.

The exposed data categories confirmed in this incident include Full Name, Social Security Number, Date of Birth, Home Address, Wage and Compensation Information, Financial Account Details, Retirement Plan Information, and Tax-Sheltered Annuity Records. These categories encompass a broad range of identifiers and financial specifics typically held for payroll, benefits, and retirement planning purposes.

Exposure of such detailed personal and financial information creates significant risks for affected individuals. Compromised Social Security Numbers and financial account details can lead to identity theft, fraudulent financial transactions, and unauthorized access to existing accounts. Individuals may also face the possibility of fraudulent tax filings or attempts to open new lines of credit in their name.

While the investigation is ongoing, individuals who receive a notification regarding this incident should immediately review all financial statements and credit reports for any suspicious or unauthorized activity. It is also advisable to consider placing a fraud alert or credit freeze with the major credit bureaus to prevent new accounts from being opened fraudulently. Regularly updating passwords for online accounts and being vigilant against phishing attempts are also recommended general precautions.