Frontline Education breach exposed K-12 student and staff data, including SSNs and Medicaid IDs
Frontline Education (Frontline Central, School Health Management)
Frontline Education, a US maker of K-12 administration software, says an attacker used a vulnerability in a third-party software product it uses to access part of its environment on Aug 14-15, 2026. Files tied to its Frontline Central and School Health Management products were affected. Depending on the person, the exposed data includes Social Security numbers, dates of birth, driver's license and passport numbers, other government IDs, Medicaid IDs and student IDs. Frontline has notified affected school districts and began mailing and emailing individual notices on or about Oct 26, 2026, with TransUnion credit monitoring for adults and cyber monitoring for minors.
Why this severity: Sensitive identity data (SSNs, government IDs, Medicaid IDs) for students and staff across many US school districts; total number of affected people not disclosed
- Started
- Aug 14, 2026
Affected
- People whose records were in Frontline Central or School Health Management files accessed on Aug 14-15, 2026
Fixed in
- Frontline says it remediated the third-party vulnerability; individual notifications started on or about Oct 26, 2026 (enroll in TransUnion monitoring by Jan 31, 2027)
Timeline2
Frontline announces it has begun sending notification letters and emails to affected individuals, listing SSNs, dates of birth, driver's license, passport and other government IDs, Medicaid IDs and student IDs among the impacted data.
Frontline's security team identifies unauthorized access through a vulnerability in a third-party software product; the last day of unauthorized activity is Aug 15.
Advisories3
Get an email when a new major security incident drops. No spam, unsubscribe any time.
