Frontline Education Data Breach Affects More Than 1.3 Million
Summary
Frontline says its investigation found that attackers exploited a third-party software vulnerability on August 14 and stole staff and student data. State filings list 1,298,917 affected; the total may be higher.
Key points
- Frontline says the incident began August 14 after attackers exploited a vulnerability in third-party software to access its environment.
- The company says attackers stole personal information from users of Frontline Central and School Health Management, including school district staff and students.
- Potentially exposed information may include Social Security numbers, dates of birth, government ID numbers, health insurance information and Student IDs.
- State filings list 1,298,917 affected people; the article says the total may be higher because additional state notices may not be publicly available.
- Frontline says it addressed the security defect and contained the attack by August 15.
- The company is offering affected adults two years of credit monitoring and identity-theft protection, and qualified minors dark-web monitoring.
Article Details
- Victim Organization
- Frontline Education
- Incident Type
- Data breach involving exploitation of a vulnerability in a third-party software product to gain unauthorized access to Frontline Education’s environment.
- Data Types Exposed
- Names
- Social Security numbers
- Dates of birth
- Driver’s license numbers
- Passport and other government ID numbers
- Health insurance information, including Medicaid IDs
- Student IDs
- Affected Records
- Filings in Massachusetts, New Hampshire, South Carolina, Texas, and Vermont report 1,298,917 affected people. The total is likely above 1.3 million, according to the article.
- Operational Impact
- The attack was fully contained by August 15. Frontline Education addressed the security defect and reinforced security.
- Claim Status
- confirmed
Vendors
Products
Frontline CentralThe investigation into the data breach determined that the hackers stole the personal information of both school district staff and students from the Frontline Central and School Health Management products.School Health ManagementThe investigation into the data breach determined that the hackers stole the personal information of both school district staff and students from the Frontline Central and School Health Management products.