K-12 administration software provider Frontline Education said it identified unauthorized activity tied to a vulnerability in a third-party software product on Aug 14, 2026, which allowed access to part of its environment, with the last unauthorized activity on Aug 15 [1]. SecurityWeek reports Frontline told the Indiana Attorney General that 3,085,266 people were affected, with data from Frontline Central and School Health Management that may include names, SSNs, dates of birth, driver's license and passport numbers, Medicaid IDs and student IDs [2]. Notified adults can enroll in two years of free TransUnion credit monitoring and minors in dark web monitoring [1][2].
HighResolvedOfficially confirmed
K-12 software provider Frontline Education breached via third-party software flaw, data of over 3.08 million district staff and students exposed
1 min read
- Disclosed
- Oct 3, 2026
- Occurred
- Aug 14, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 10, 2026
- Scale
- 3,085,266 people[2]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
Remediation
Vendor guidance
- 1Enroll in free monitoring mitigate[1]
Notified individuals should enroll in TransUnion credit monitoring (adults) or dark web monitoring (minors).
References
Official / primary1
- [1]
“On August 14, 2026, Frontline identified unauthorized activity associated with a vulnerability in a third-party software product used by the company.”
Media2
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.