Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers.
Frontline Education is an edtech company that provides administrative and workforce management software and services to school districts.
Last night, a reader shared with BleepingComputer a data breach notification that Frontline sent to an affected school district, stating that attackers had entered the environment via a vulnerability in a third-party application.
“On August 14, 2026, our security team identified a vulnerability in a third-party software product we use that allowed unauthorized access to a portion of the environment,” the notification letter said.
“We immediately investigated the issue with the assistance of an independent cybersecurity firm, remedied the vulnerability, cooperated with law enforcement and took steps to further strengthen the security of our systems.”
The company did not disclose which third-party application was involved or when the unauthorized access first occurred.
In the notification seen by BleepingComputer, our source said all employees in the district were affected and information such as Social Security numbers, email addresses and mailing addresses were exposed.
BleepingComputer contacted Frontline Education yesterday about the breach but received no response to our email.
However, IT administrators reported it to the school K12SysAdmin subreddit that county officials had begun receiving similar notifications.
An administrator initially said his manager and manager received the notification on October 1 from frontline@notifications.cyberscout.com, but Frontline Support had not yet confirmed whether the message was legitimate.
However, other administrators later said they had independently confirmed that the breach reports were legitimate.
“Can confirm this is legitimate. We have had verbal contact with our frontline representative regarding this,” an administrator reported.
An administrator also shared a copy of a frontline notification that said 1,210 employees associated with his district were affected and that Social Security numbers, email addresses and addresses were also exposed.
Frontline says it will process notifications to affected individuals on behalf of affected school districts unless a district opts out by Oct. 16.
Counties wishing to opt out can do so at www.frontline-transunion.com or by calling 833-516-8792. If a district opts out, Frontline says it will not provide notification services or reimburse the district for the cost of issuing its own notifications.
Affected adults will be offered two years of free credit monitoring and identity theft protection through TransUnion, while minors will be offered cyber monitoring services.
The company says it will also process required reports to state attorneys general and cover costs associated with individual reports and identity protection services.
It’s unclear how many school districts or individuals were affected.
