Breach · · 3 min read
Frontline Education breach: SSNs and IDs from U.S. school systems
A flaw in third-party software let attackers into Frontline Central and School Health Management in August. Letters started October 26. What was taken and what to do.
Frontline Education, which sells administration software to more than 10,000 U.S. school organizations, says attackers got into part of its systems in August 2026. Social Security numbers, birth dates and government ID numbers were among the data affected. The company began notifying people on October 26. If you work for, or have a child in, a U.S. school district that uses Frontline, here’s what is known.
What happened
Frontline’s notice says its security team found a vulnerability in a third-party software product on August 14, 2026, which had allowed unauthorized access to part of its environment starting that day. The last unauthorized activity was on August 15. The affected systems were Frontline Central, which districts use for employee records, and School Health Management, which handles student health records.
Frontline says what was exposed varies by person, but across the affected files it found:
- Social Security numbers
- dates of birth
- driver’s licence numbers, passport numbers and other government ID
- Medicaid ID numbers
- student ID numbers
Frontline says it has notified the affected districts and, with them, is notifying individuals by email or U.S. mail where it has an address. It also posted the notice publicly because it couldn’t reach everyone directly. It says it isn’t aware of any misuse of the data. The company hasn’t said how many people are affected or named the third-party product.
What this means for you
Because Frontline sells to districts, not to families, you may not recognize the name. The notice will usually come from TransUnion on Frontline’s behalf, and your district may also send its own message.
A Social Security number combined with a birth date is enough to attempt opening credit or filing a tax return. For children, the risk is that it goes unnoticed for years, because no one checks a child’s credit.
What you can do
- Enrol in the monitoring. Frontline is offering adults in the U.S. two years of credit monitoring and minors cyber monitoring, both through TransUnion at no cost. The TransUnion call centre is 1-800-759-7279, weekdays 8 a.m. to 8 p.m. Eastern.
- Freeze your credit, and your child’s. In the U.S., a security freeze is free at each of the three bureaus and is the strongest protection. Parents can request one for a minor.
- Be suspicious of any call asking for your details. Frontline says it will never contact you by phone or email to ask for personal or account information. A message claiming to be from Frontline or your district that asks you to confirm your Social Security number is a scam. See how scammers use leaked data.
- Ask your district if you’re unsure. If you didn’t get a notice but think you might be affected, your school district can tell you whether it uses Frontline Central or School Health Management.
How Frame helps
Frame keeps a catalog of known breaches and lets you add the ones you know you were part of to a verified email. Frame shows what each one exposed, gives you a short checklist, and counts it in your exposure report. Automatic breach lookups aren’t live yet. We never collect or store the leaked records themselves.
Sources
- Frontline Education, Frontline Education Notice of Data Breach, October 26, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.