Frontline Education breach exposes student data after two-day August intrusion

Frontline Education says hackers accessed its systems through a third-party software vulnerability over two days in August, exposing student data after employee data had already been confirmed as affected. The company supports more than 10,000 K-12 organizations and serves more than 50 million students nationwide. It says it fixed the vulnerability and is offering monitoring services to affected adults and minors.

Breach timeline and systems involved

Frontline Education, a Pennsylvania-based technology company, said its security team identified the vulnerability on August 14, 2026, and that the last day of unauthorized activity was August 15. The two-day breach involved Frontline Central, an employee management platform, and School Health Management, the company's student nursing documentation platform. The company released a formal data breach notice and said it has begun sending letters to individuals whose data was impacted.

The platform is used by more than 80,000 schools in the U.S. Frontline provides software in three key areas: HR management, student solutions, and business operations. The announcement follows recent breach disclosures involving Navigate360 and the Educational Testing Service (ETS), which affected millions of California students.

Data that may have been exposed

After a thorough and time-intensive analysis of the impacted files, Frontline said the personal information impacted may include names, addresses, email addresses, Social Security numbers, dates of birth, driver's license numbers, passport numbers, other government IDs, Medicaid IDs, and student IDs. The company said the impacted data varies by individual.

Those affected will be notified by email or by letter sent via the U.S. Postal Service, as required and where available. It remains unclear how many employees, students, and school districts overall have been impacted.

Impact across school districts

The personally identifiable information of administrators, staff, nurses, and substitute teachers, as well as information related to special education programs across 80,000 schools, was confirmed to be involved on October 2. More than two months later, student data has now been confirmed to have been affected across multiple U.S. school districts.

In early October, public school districts in Texas, Maryland, Washington, and South Carolina disclosed the breach to educators and parents. Killeen Independent School District in Texas reported approximately 45,000 potentially affected individuals, while Methuen Public Schools in Massachusetts reported more than 1,600 people affected. Greenwood School District in South Carolina said almost 17,000 current and former students were impacted, while Highline Public Schools in Washington state confirmed some student and employee information was affected. Prince George's County Public Schools in Maryland announced that no student data had been impacted.

Response and monitoring

Frontline said that upon discovering the breach, it alerted law enforcement, brought in outside cybersecurity experts to investigate and help remediate it, and reinforced its systems by enhancing security and monitoring controls. It says adults are being offered two years of credit monitoring and minors cyber monitoring.

Sources: Cybernews