What happened
Frontline Education makes admin software for K-12 school districts, used by thousands of districts across the US. On August 14, 2026 someone used a flaw in a third-party software product Frontline relies on to get into part of its environment, specifically Frontline Central and School Health Management. Frontline says the activity ended August 15, and it fixed the flaw and brought in an outside security firm and law enforcement.
Districts were told first. Frontline started mailing and emailing letters to affected people on or about October 26, 2026.
Who is affected
School district staff and students. Filings with state attorneys general in Massachusetts, New Hampshire, South Carolina, Texas and Vermont add up to 1,298,917 people, and Frontline also filed in other states that do not post totals, so the real number is likely higher. One Texas filing tied to Klein ISD alone lists 37,966 people.
Later local coverage also named Jefferson County Public Schools (JCPS) in Louisville among the districts sending staff letters about the same Frontline vendor breach, with Social Security numbers listed for many people and free TransUnion monitoring offered in the notice.
What data was exposed
It varies by person, but may include name, address, email address, Social Security number, date of birth, driver's license, passport or other government ID number, Medicaid ID and other health insurance info, and student ID.
What to do now
- 01Enroll in the free TransUnion services in your letter: two years of credit monitoring for adults, and dark web monitoring for minors.
- 02Freeze your credit, and your kids' credit, at Equifax, Experian and TransUnion. It is free and stops new accounts being opened with a stolen SSN.
- 03Watch for emails, texts or calls that say they are from Frontline or your district and ask you to verify an SSN or log in. The real enrollment code comes in the letter.
- 04Staff: file your taxes early and consider an IRS Identity Protection PIN, since SSN plus birth date is what tax fraud needs.
How to check if you were affected
The Frontline letter or email is the confirmation. Your district HR or school office can also tell you if your district was hit.
Have I Been Pwned is a free, solid way to see older breaches tied to your email, though this one may not show up there since it is mostly SSN and ID data.
OSINT Pro lets you check an email against leak and stealer log data, so you can see what else about you is already out there. OSINT Pro does not have the Frontline dataset, and there is no sign it has been published.