DataBreachCaseFile.com
MonitoringMaryland AG filing · February 28, 2025

iTP Partners, Carruth Consulting Report 2025 Data Breach

iTP Partners, operating with Carruth Compliance Consulting, filed a data breach report in Maryland in February 2025. This incident potentially exposed sensitive personal and financial information managed by the companies, which specialize in administrative and benefits management for various organizations. Affected individuals should review their data breach notification letters carefully.

State
Maryland
Reported
February 28, 2025

What may have been exposed

  • Full Name
  • Social Security Number
  • Date of Birth
  • Wage and Compensation Information
  • Tax Return Information
  • Direct Deposit Account Details
  • Home Address
  • Employee ID Number

iTP Partners, in conjunction with Carruth Compliance Consulting, reported a data breach to Maryland authorities on February 28, 2025. These firms provide specialized administrative, compliance, and employee benefits management services, meaning they routinely handle substantial volumes of sensitive data for client organizations and their employees.

The reported incident involved an exposure of specific personal data categories. These include Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Home Address, and Employee ID Number. Such information is often central to personal identity and financial security.

While details regarding the breach type and its exact scope remain under investigation, the nature of the exposed data indicates a significant security event. Organizations like iTP Partners and Carruth Compliance Consulting are high-value targets due to the centralized employee and financial records they maintain. Incidents of this kind can stem from various cyber threats, leading to unauthorized access and potential data exfiltration.

Individuals who receive a data breach notification from iTP Partners or Carruth Compliance Consulting should take proactive steps to protect themselves. It is recommended to monitor financial account statements and credit reports regularly for any unusual activity. Placing a fraud alert or credit freeze with major credit bureaus can help prevent unauthorized access to new lines of credit.

Additionally, exercise caution when receiving unsolicited communications, especially those requesting personal information. Verify the legitimacy of any requests directly with the company through official contact channels, as scammers may attempt to exploit data breaches for phishing or identity theft. Reviewing the provided notification letter for specific guidance is also crucial.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Guard against tax fraud

    File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Maryland Attorney General filing

Related data breach cases