---
title: Frontline Education, a K-12 administration software vendor, is notifying about 1.3 million school staff and students that SSNs, IDs and Medicaid numbers were taken in an August breach | ctxsec
url: https://ctxsec.com/items/frontline-education-aug-2026-breach-1-3m-ssn-k12-staff-students
description: "Frontline says an attacker exploited a vulnerability in a third-party product it uses to get into part of its environment on Aug 14, 2026, with the last unauthorized activity on Aug 15. Data from its Frontline Central and School Health Management products was taken; depending on the person it includes Social Security numbers, dates of birth, driver's license, passport and other government ID numbers, Medicaid IDs and student IDs. Notices began around Oct 26. SecurityWeek counts 1,298,917 affected people in filings with five state attorneys general, and filings in other states mean the total is likely higher."
status: "official (Frontline Education notice and incident page; state AG filings tallied by SecurityWeek, Nov 3). Frontline has not published a total"
published: 2026-11-03
---

> Frontline says an attacker exploited a vulnerability in a third-party product it uses to get into part of its environment on Aug 14, 2026, with the last unauthorized activity on Aug 15. Data from its Frontline Central and School Health Management products was taken; depending on the person it includes Social Security numbers, dates of birth, driver's license, passport and other government ID numbers, Medicaid IDs and student IDs. Notices began around Oct 26. SecurityWeek counts 1,298,917 affected people in filings with five state attorneys general, and filings in other states mean the total is likely higher.

[← Cybersecurity News](/news) · [markdown](/items/frontline-education-aug-2026-breach-1-3m-ssn-k12-staff-students.md)

official (Frontline Education notice and incident page; state AG filings tallied by SecurityWeek, Nov 3). Frontline has not published a total

2026-11-03

### Frontline Education, a K-12 administration software vendor, is notifying about 1.3 million school staff and students that SSNs, IDs and Medicaid numbers were taken in an August breach

- **Who is affected:** staff and students at school districts using Frontline Central or School Health Management. Frontline notified districts first and is mailing or emailing individuals with them.
- **Offered:** two years of TransUnion credit monitoring for adults and dark-web monitoring for minors; enroll by Jan 31, 2027. Call center 1-800-759-7279.
- **Not disclosed:** which third-party product or vulnerability was used, and the total number of people.

**For districts:** expect targeted phishing that references the breach and student health records. For parents: a child's SSN is valuable precisely because nobody checks it for years, so consider a credit freeze for minors with each bureau.

Sources: [Frontline Education: Cybersecurity incident information](https://www.frontlineeducation.com/cybersecurity-incident-information/) · [Frontline Education: Notice of Data Breach (Business Wire, Oct 26)](https://www.businesswire.com/news/home/20261026104734/en/Frontline-Education-Notice-of-Data-Breach) · [SecurityWeek: Frontline Education data breach impacts over 1.3 million (Nov 3)](https://www.securityweek.com/frontline-education-data-breach-impacts-over-1-3-million/)