Frontline Education Breach via Third-Party Software Exploit Exposes Data of 1.3 Million+ School Staff and Students
Frontline Education, a provider of K-12 school district administration software, is notifying over 1.3 million individuals that their personal information was compromised in a data breach. The incident occurred on August 14, 2026, when attackers exploited a vulnerability in a third-party software product to gain unauthorized access to Frontline's environment, with the attack fully contained by August 15. Data stolen from the Frontline Central and School Health Management products affected both school district staff and students, and may include names, Social Security numbers, dates of birth, driver's license numbers, passport and other government ID numbers, health insurance information such as Medicaid IDs, and Student IDs. State Attorney General filings in Massachusetts, New Hampshire, South Carolina, Texas, and Vermont confirm 1,298,917 affected individuals, but additional filings in California, Indiana, and Iowa suggest the true total is likely well above 1.3 million.
Remediação
Frontline patched the exploited third-party vulnerability and reinforced its security posture. The company is offering affected US adults two years of free credit monitoring and identity-theft protection services, and free dark-web monitoring for qualified minors. Notifications to affected school districts and individuals are ongoing via email and postal mail.
Linha do tempo
-
Frontline Education Breach via Third-Party Software Exploit Exposes Data of 1.3 Million+ School Staff and Students
ler a análise desta fonte ocultar
Frontline Education, a provider of K-12 school district administration software, is notifying over 1.3 million individuals that their personal information was compromised in a data breach. The incident occurred on August 14, 2026, when attackers exploited a vulnerability in a third-party software product to gain unauthorized access to Frontline's environment, with the attack fully contained by August 15. Data stolen from the Frontline Central and School Health Management products affected both school district staff and students, and may include names, Social Security numbers, dates of birth, driver's license numbers, passport and other government ID numbers, health insurance information such as Medicaid IDs, and Student IDs. State Attorney General filings in Massachusetts, New Hampshire, South Carolina, Texas, and Vermont confirm 1,298,917 affected individuals, but additional filings in California, Indiana, and Iowa suggest the true total is likely well above 1.3 million.
Remediation
Frontline patched the exploited third-party vulnerability and reinforced its security posture. The company is offering affected US adults two years of free credit monitoring and identity-theft protection services, and free dark-web monitoring for qualified minors. Notifications to affected school districts and individuals are ongoing via email and postal mail.