Frontline Education breach exposes data of 3 million people

Frontline Education informed the Indiana Attorney General’s Office that a data breach suffered in August affected more than 3 million people, with the company stating a total of 3,085,266 individuals were impacted. The attacker gained access to part of Frontline’s environment by exploiting a vulnerability in a third‑party software product. The intrusion was detected on 14 August and was fully contained the following day, 15 August, according to Frontline.

The breach exposed personal information from two Frontline products, Frontline Central and School Health Management, affecting both school district employees and students.

The data exposed varies by individual but can include names, Social Security numbers, dates of birth, driver’s licence numbers, passports and other government IDs, health insurance details (including Medicaid IDs), and student identifiers. The company has not disclosed the third‑party product involved or named the threat actors, and there had been no public attribution from a cybercrime group at the time of the disclosure.

Adults in the United States are offered two years of free credit monitoring and identity theft protection, while eligible minors receive free dark web monitoring. Frontline previously reported lower figures, indicating roughly 1.3 million affected in earlier state filings.