Frontline Education breach: Student SSNs, Medicaid IDs and DOBs exposed via Frontline Central and School Health Management
Severity: high · Patch status: no-fix-needed · Since 2026-10-29
Frontline Education announced on Oct. 26, 2026, a cybersecurity incident affecting its Frontline Central and School Health Management products, which are used by school districts to manage employee and student health records. Data exposed may include Social Security numbers, dates of birth, and government ID numbers, including Medicaid IDs, for both adults and minors whose information was processed through these products. The vendor has not publicly detailed how the intrusion occurred, how many individuals or districts are affected, or whether data was exfiltrated. Affected individuals are being notified; no fix applies beyond the vendor's incident response, so organizations using the products should monitor vendor advisories and notifications.
What to do
- Check whether your district uses Frontline Central or School Health Management and await/verify vendor breach notifications
- Identify affected students and staff and prepare identity-protection and notification obligations under FERPA/state breach laws
- Monitor Frontline Education advisories for scope updates and indicators of compromise
- Review access to and data sharing with Frontline products; consider credential resets for district accounts
- Prepare communications for parents/guardians of minors whose SSNs or Medicaid IDs were exposed
Sources
All live incidents on Threat Watch
