Frontline Education Breach Exposes Data of Over 1.3 Million

Frontline Education says attackers exploited a vulnerability in a third-party software product to gain unauthorised access to its environment on 14 August. The company says it fixed the security flaw, strengthened security and contained the attack by 15 August. Its investigation found that information was stolen from its Frontline Central and School Health Management products, affecting school district staff and students.

The data exposed varies by person and may include names, Social Security numbers, dates of birth, driving licence numbers, passport and other government identification numbers, health insurance details such as Medicaid IDs, and Student IDs. Frontline has not given its own total, but filings in Massachusetts, New Hampshire, South Carolina, Texas and Vermont record 1,298,917 affected people.

Notices filed in California, Indiana and Iowa, and potentially states without public breach portals, indicate the overall number is likely to exceed 1.3 million.

Frontline says it has notified affected school districts and, with their co-operation, is contacting people by email or post where required and possible. It is offering affected adults in the US two years of free credit monitoring and identity-theft protection; eligible minors can receive free dark-web monitoring.