Frontline Education data breach: school employee data exposed

We publish these pages from public notices and reporting so you can understand what was exposed. Everything here is already public. Always confirm with the organization named in your notice.

Frontline Education, which makes HR and administration software used by K-12 school districts, is notifying districts that attackers accessed employee data through a vulnerability in third-party software. The data includes Social Security numbers, email addresses and home addresses of school district employees. Frontline is offering affected adults two years of free credit monitoring through TransUnion.

What happened

Frontline identified the vulnerability on August 14, 2026, and began notifying school administrators through Cyberscout on October 1, 2026 (Reported, BleepingComputer). Frontline says it has fixed the vulnerability, is working with law enforcement and is not aware of any misuse of the data (Reported). It has not named the third-party software involved.

Frontline has not published a total number of affected people. Individual district notices give a sense of scale: one district cited 1,210 employees, and a filing for Klein ISD in Texas lists about 37,966 Texas residents, with driver's license numbers among the categories (Reported, Houston Chronicle). Frontline said it would notify affected individuals on districts' behalf unless a district opted out by October 16. Some districts have said information tied to student-related products may also be involved; families should follow their district's notices.

What data was involved

• Social Security numbers: Reported
• Email addresses and physical addresses: Reported
• Driver's license numbers: Reported for at least one Texas district filing

A Social Security number with a home address is enough to attempt new credit or a tax filing in your name. Home addresses also connect to people-search listings that show where someone lives.

What you can do now

1. Ask your district whether you are included. Your HR or benefits office can tell you whether your district received a Frontline notice and whether your record was part of it.
2. Enroll in the TransUnion monitoring. Use the enrollment details in your letter. Two years of credit monitoring and identity protection are offered to affected adults.
3. Freeze your credit. A free freeze with Equifax, Experian and TransUnion blocks most new accounts opened in your name.
4. Get an IRS Identity Protection PIN. This protects your federal tax return, which matters for employees whose payroll data is involved.
5. Be careful with payroll and HR messages. Phishing aimed at school staff often asks you to "update" direct deposit or tax details. Check any such request directly with your district before acting on it.