Frontline Education, a provider of administration and workforce management software for school districts, has confirmed a data breach that exposed employee information, including Social Security numbers, after attackers exploited a vulnerability in a third-party software product. The company began notifying affected school districts of the incident in early October 2026.
According to a notification shared with an impacted school district, Frontline Education's security team identified the vulnerability and unauthorized access on August 14, 2026. The company stated it promptly investigated the issue with the assistance of an independent cybersecurity firm, remediated the vulnerability, engaged with law enforcement, and implemented additional security measures.
While Frontline Education has not publicly disclosed the specific third-party application involved or the initial date of unauthorized access, school IT administrators have independently confirmed the legitimacy of the breach notifications. These notifications, sent from frontline@notifications.cyberscout.com, have been received by superintendents and business managers in various districts.
Reports from affected districts indicate that exposed information includes Social Security numbers, email addresses, and physical addresses. One administrator shared a notification indicating that 1,210 employees associated with their district were impacted. The scope of the breach, in terms of the total number of affected school districts or individuals, remains undisclosed by Frontline Education.
Frontline Education is offering to manage notifications to affected individuals on behalf of impacted school districts. Districts have the option to opt out of this service by October 16, 2026, via www.frontline-transunion.com or by calling 833-516-8792. If a district opts out, Frontline will not provide notification services or reimburse the district for the costs of issuing its own notices.
For affected adults, the company is providing two years of free credit monitoring and identity theft protection through TransUnion. Minors impacted by the breach will be offered cyber monitoring services. Frontline Education has also committed to handling required notifications to state attorneys general and covering the costs associated with individual notifications and identity protection services.
