Frontline Education Breach Exposes Sensitive Data of More Than 805,000 People

Frontline Education, a Pennsylvania-based provider of K–12 school administration software, disclosed a breach affecting at least 805,382 individuals across four states. Unauthorized access to part of its environment began on August 14, 2026, the same day its security team identified a vulnerability in an unnamed third-party software product. Reported compromised data included Social Security numbers, dates of birth, government identification numbers, Medicaid IDs, and student IDs. A draft notification filed with South Carolina confirms that personal information processed for a school district was obtained, but leaves the district name and affected data categories blank.

Frontline said it remediated the vulnerability, implemented containment measures, engaged independent cybersecurity specialists, notified law enforcement, and strengthened security and monitoring controls. The company began notifying affected individuals in cooperation with school districts, with its October 26 notice offering 24 months of free TransUnion credit monitoring and fraud assistance. The affected software product, attacker identity, and whether a ransom demand was received remain undisclosed, limiting other organizations’ ability to assess exposure to the same vulnerability.