iTP Partners; Carruth Compliance Consulting data breach

Clerk's notes

On February 28, 2025, iTP Partners, operating with Carruth Compliance Consulting, filed a data breach notification with the Maryland Attorney General's office. These firms specialize in administrative, compliance, and employee benefits management, handling vast amounts of sensitive personal and financial data for their clients and their employees.

While the specific nature of the security incident remains unspecified, such breaches commonly stem from unauthorized access to company networks, database compromises, or sophisticated ransomware attacks. Incidents of this type, particularly involving third-party service providers like iTP Partners and Carruth Compliance Consulting, often target centralized repositories of employee and financial records.

The compromised data reportedly includes Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Home Address, and Employee ID Number. The exposure of these core identifiers creates a significant risk for identity theft, fraudulent financial activity, and potential tax return fraud.

iTP Partners and Carruth Compliance Consulting were obligated to implement robust security measures to protect the sensitive information entrusted to them. Federal and state regulations, including Maryland's privacy statutes, require entities to maintain reasonable safeguards. A successful breach of this nature indicates potential deficiencies in these protective measures.

If you received a data breach notification letter from iTP Partners or Carruth Compliance Consulting, your personal information was involved in this security incident. Receiving this notice establishes your standing to seek legal guidance regarding the potential impact. Our firm offers a free review of your case to help you understand your options.

If a notification letter about this breach reached you, see every Maryland data breach on file or browse all cases.