Frontline Education breach exposed records of 3,085,266 people
Affected adults in the US get two years of free credit monitoring, while the company has not yet named the flawed third-party product or identified the attackers.
Frontline Education, a provider of school administration software, told Indiana's Attorney General that an August breach exposed records for 3,085,266 people, more than double the roughly 1.3 million reported in earlier filings with other states. Intruders reached part of its environment by exploiting a flaw in a third-party product, which the company has not named; it spotted the intrusion on August 14 and says it was contained the following day. The stolen data came from the Frontline Central and School Health Management products and covers students and school district staff, with fields that differ by person, including Social Security numbers, health insurance identifiers and student IDs. US adults receive two years of free credit monitoring and identity protection, and eligible minors receive dark web monitoring. No group has claimed responsibility so far.
Why it matters
The count is more than double the roughly 1.3 million reported in earlier state filings, so students and school district staff whose Social Security numbers and health insurance identifiers were taken now face a longer window of exposure than first reported. Frontline has said the intrusion was contained the day after it was detected on August 14, but the stolen data, which varies by person, remains in circulation. Anyone whose records were in the Frontline Central or School Health Management products should watch for identity misuse and check whether they have received notice.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.