Frontline Education breach exposes school staff SSNs
Frontline Education, a US edtech provider, has started telling school districts that attackers got into its systems through a flaw in third-party software and stole employee data. The stolen records include Social Security numbers.
Frontline sells administration and workforce management software and services to school districts. A reader passed BleepingComputer a breach notification the company had sent to one affected district, and administrators in other districts have since reported receiving similar letters.
A flaw in software Frontline did not build
According to the notification letter, Frontline's security team found the problem in mid-August.
"On August 14, 2026, our security team identified a vulnerability in a third-party software product we use that allowed unauthorized access to a portion of the environment," the letter reads.