Frontline Education Breach Exposes Student and Staff Data

A data breach at school software provider Frontline Education affected more than 3 million students and school district employees. Families should check any breach notice carefully because the stolen information may include Social Security numbers, birth dates, health insurance details and government identification numbers.

What happened

Frontline told the Indiana Attorney General’s Office that the breach affected 3,085,266 people, according to SecurityWeek. That total is more than twice the roughly 1.3 million people represented in the company’s earlier state filings.

Frontline said attackers entered part of its computer environment by exploiting a vulnerability in software supplied by another company. It detected the intrusion on August 14 and said it had contained the attack by the following day.

The attackers stole information held in Frontline Central and School Health Management, two products used by school districts. Frontline has not identified the vulnerable third-party product, named the attackers or disclosed whether a known cybercrime group was involved.

Who is affected

The breach covers school district employees and students whose information was stored in the affected Frontline products. The exact information exposed differs by person.

Compromised records may contain names, Social Security numbers, dates of birth, driver’s license numbers, passport details, other government identification numbers, health insurance information such as Medicaid IDs, and student identification numbers. Frontline has not said that every affected person had all of these details stolen.

Affected adults in the United States are being offered two years of free credit monitoring and identity theft protection. Eligible minors are being offered free dark web monitoring. The source does not specify which districts were affected or provide a complete public list of victims.

What to do now

1. Search for a notice from your school district or Frontline. Check your email inbox, spam folder and postal mail. Read the notice closely to learn whose information was involved and which data fields were exposed.

2. Confirm the notice through a trusted channel. Instead of using contact details from an unexpected message, open your school district’s official website and call the listed main office. Ask whether the district used Frontline Central or School Health Management and whether your household is affected.

3. Enroll in the offered protection. Affected adults should follow the enrollment instructions in the official notice to claim the two years of free credit monitoring and identity theft protection. Eligible families should also activate the dark web monitoring offered for minors.

4. Review financial and credit activity. Look for accounts, inquiries or transactions you do not recognize. Report suspicious activity directly to the relevant bank, card issuer or credit bureau using contact information from its official website or your physical card.

5. Protect exposed identification documents. If your notice lists a driver’s license, passport, Medicaid ID or another government identifier, contact the issuing agency or insurer through its official website and ask what protective or replacement steps it recommends.

6. Watch for follow-up scams. Treat unexpected messages about this breach cautiously, especially if they request sensitive information. Frontline has not publicly identified the attackers, and the exploited third-party product has not been disclosed.