Frontline Education notifies more than 1.3 million people that their personal information was compromised in a data breach.
The incident occurred on August 14 and involved the exploitation of a vulnerability in a third-party software product to gain unauthorized access to Frontline’s environment.
Frontline, which provides administration software specifically designed for K-12 school districts, fixed the security flaw and strengthened security. The attack was fully contained by August 15, the company said in a statement. incident notice.
The data breach investigation determined that the hackers stole the personal information of school district staff and students from Frontline Central and School Health Management products.
Although the data stolen varies among individuals, it can include names, Social Security numbers, dates of birth, driver’s license numbers, passport numbers and other government identification numbers, health insurance information such as Medicaid ID cards and student ID cards.
“Frontline has notified affected school districts and, in cooperation with those districts, has begun notifying individuals whose personal information was affected by email or letter sent via the U.S. Postal Service, as necessary and when available,” the company says.
Although Frontline did not share the number of people potentially affected, documents filed with the attorney general’s offices in Massachusetts, New Hampshire, South Carolina, Texas and Vermont show that 1,298,917 people were affected.
However, the company has also filed notices with AGOs in California, Indiana, and Iowa, and possibly other states that do not have data breach portals, and the total number of people affected is likely well above 1.3 million.
Frontline offers affected U.S. adults two years of free credit monitoring and identity theft protection services. For qualified minors, it offers free dark web monitoring services.
Safety Week has emailed Frontline for additional information about the data breach and will update this article if the company responds.
Related: Hack of Florida Student Aid website puts data of 4.9 million people at risk
Related: Revolve data breach affects at least 200,000 people
Related: Chainalysis reveals data breach following AI-powered cyberattack
Related: Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijacking
