Attackers exploited a vulnerability in a third-party software product used by Frontline Education to gain unauthorized access to its environment. This breach led to the exposure of sensitive employee information, including Social Security numbers, email addresses, and physical addresses, across multiple school districts using Frontline's administration and workforce management software. Frontline identified the vulnerability on August 14, 2026, promptly investigated with an independent cybersecurity firm, remediated the issue, and involved law enforcement. The company is handling notifications and offering credit monitoring and identity protection services to affected individuals. The specific third-party software exploited and the initial breach date remain undisclosed.

The breach exposed personally identifiable information (PII) of school district employees, including Social Security numbers, email addresses, and physical addresses. This exposure increases the risk of identity theft and fraud for affected individuals. The breach impacts multiple school districts and thousands of employees, potentially causing significant privacy and security concerns. Frontline Education is providing two years of free credit monitoring and identity theft protection for adults and cyber monitoring for minors. The company is also covering notification costs and regulatory reporting obligations.

Frontline Education has remediated the exploited vulnerability in the third-party software and engaged law enforcement. The company is managing notifications to affected individuals and regulatory authorities and offering credit monitoring and identity protection services. School districts can opt out of notification services by October 16, but otherwise, Frontline will handle all notifications and associated costs. No additional immediate action is required from districts or individuals beyond participating in offered services.