Frontline Education data breach — 1.3M K-12 staff/student records stolen via third-party software flaw
Severity: high · Patch status: no-fix-needed · Since 2026-11-03
Frontline Education, which provides administration software for K-12 school districts, is notifying over 1.3 million people of a data breach. On August 14, 2026, attackers exploited a vulnerability in a third-party software product to gain unauthorized access to Frontline's environment; the flaw was addressed and the attack fully contained by August 15. Hackers stole personal information of school district staff and students from the Frontline Central and School Health Management products, potentially including names, Social Security numbers, dates of birth, driver's license and passport numbers, health insurance information such as Medicaid IDs, and Student IDs. State AG filings confirm at least 1,298,917 affected individuals, with the true total likely higher. Frontline is notifying affected districts and individuals and offering two years of free credit monitoring to US adults and dark-web monitoring for qualified minors.
What to do
- School districts using Frontline products should review breach notifications and identify affected staff and students
- Advise affected individuals to enroll in the offered credit monitoring or dark-web monitoring services
- Watch for phishing and identity fraud targeting affected staff and students, especially minors
- Review third-party software access and integrations into Frontline or district environments
- Verify Frontline's remediation and any required credential resets or contract updates
Sources
All live incidents on Threat Watch
