Frontline Education

Frontline Education, a provider of administration software for K-12 school districts, suffered a data breach on August 14 in which attackers exploited a vulnerability in a third-party software product to gain unauthorized access to its environment. The company said the attack was fully contained by August 15. The attackers stole personal information of school district staff and students from the Frontline Central and School Health Management products. Depending on the individual, the data may include names, Social Security numbers, dates of birth, driver's license numbers, passport and other government ID numbers, health insurance information such as Medicaid IDs, and student IDs. Filings with attorney general offices in five states show 1,298,917 people affected, and the total is likely well above 1.3 million because notices were also filed in other states.