Frontline Education Cyberattack Exposes Student and Staff Records at School Districts Nationwide

Frontline Education, a software provider serving school districts across the United States, disclosed in October 2026 that a cyberattack exposed sensitive personal data for students and school employees.

The breach occurred between August 14 and August 15, 2026, when an unauthorized party exploited a vulnerability in a third-party software product integrated into Frontline's systems. The company identified and contained the intrusion within 24 hours but did not begin notifying affected individuals until October 1, 2026. Formal notification letters were distributed starting around October 26, 2026.

The attack affected Frontline's Central and School Health Management platforms, which are used to manage administrative, HR, and medical records. For school employees, exposed data included Social Security numbers, home addresses, email addresses, driver's license numbers, and passport numbers. For students, compromised records included student IDs, names, birthdates, and Medicaid billing numbers.

Frontline Education has partnered with TransUnion to provide affected individuals with two years of free credit monitoring and identity-theft protection. For minors, the company is offering dark-web monitoring where available.

The company serves a large portion of the U.S. school market. Cybernews reported that Frontline's platforms are used by districts serving tens of millions of students nationwide.

Security experts say school-related data breaches are particularly concerning because the information can be used for social engineering or phishing attacks targeting families and staff. They recommend that affected individuals verify any notification by contacting their school district or Frontline directly through official channels.

The breach triggered investigations in multiple states, including South Carolina, where state law enforcement and cybersecurity teams were notified.