If you received a Frontline Education breach letter, your Social Security number or other government ID may be exposed. Frontline says attackers accessed its Frontline Central and School Health Management systems on August 14–15, 2026. Enroll in the free TransUnion monitoring, freeze your credit (and your child's), and remove your details from data broker sites.
What Happened in the Frontline Education Data Breach
Frontline Education sells HR, payroll, absence-management and school-nurse software to thousands of US K-12 school districts. According to the company's notice, its security team identified an exploited vulnerability in an unnamed third-party software product on August 14, 2026, and the unauthorized access ended on August 15. Frontline says it brought in an independent cybersecurity firm, fixed the vulnerability and notified law enforcement.
The intrusion reached a portion of the environment behind two products: Frontline Central, which districts use to store employee records, and School Health Management, which nurses use for student health records. Districts that used neither product were not affected. Frontline first warned districts in early October and began mailing letters to affected individuals on or about October 26, 2026. At least six proposed class actions have since been filed against its parent company, Frontline Technologies Group.
The Letter Is Real — But Expect Copycats
Frontline's notices come from Cyberscout, a TransUnion company, and some administrators initially suspected them of being phishing. They were confirmed as legitimate. Scammers routinely imitate real breach letters, though, so never click a link in an unexpected email. Type the enrollment address from your paper letter yourself. Our guide to fake breach notification scams shows the warning signs.
What Data Was Exposed
Frontline says the exposed information varies by person and may include:
- Social Security numbers
- Dates of birth
- Driver's license, passport or other government ID numbers
- Medicaid ID numbers (from school health records)
- Student ID numbers
- Names, email addresses and home addresses
Both adults and minors are affected. Most of the adults are current and former school employees: teachers, substitutes, nurses, bus drivers and administrators. The minors are students whose records were held in school health software. Frontline has not published a total count. State filings show 16,550 people in Massachusetts, 7,475 in New Hampshire and 2,985 in Vermont, and one Texas district alone reported about 45,000 affected people. The national total is likely much higher.
Is your data already out there?
Leaked data ends up on broker sites and in scammers' hands. Run a free 60-second scan to see your exposure — then let us remove it.
Run a free scan★★★★★ 4.8/5 · Trusted by thousands of families
Why This Breach Is More Serious Than Most
An SSN combined with a date of birth is enough to open credit, file a fraudulent tax return or claim benefits in your name. Children are an especially attractive target: a child's clean SSN can be used for years before anyone checks the credit file. Medicaid IDs add a medical identity theft risk too. This is the same pattern seen in the school data breaches that have hit districts through their software vendors over the past two years.
What to Do Now: 6 Steps
Step 1: Enroll in the free TransUnion monitoring
Frontline is offering adults two years of free credit monitoring and identity theft protection through TransUnion, and minors free cyber monitoring. Use the enrollment code in your letter before the deadline it lists. It costs nothing, but remember that it only detects fraud after it happens. Read whether free breach monitoring is enough before relying on it alone.
Step 2: Freeze your credit at all three bureaus
A freeze actually blocks new accounts, which monitoring does not. Freezing at Equifax, Experian and TransUnion is free and takes about 15 minutes online. Our step-by-step guide to freezing your credit at all three bureaus walks through each site.
Step 3: Freeze your child's credit
If your child's school used Frontline's health software and you received a letter for them, request a freeze for the minor at each bureau. You will need to mail or upload proof of guardianship plus the child's birth certificate and Social Security card.
Step 4: Get an IRS Identity Protection PIN
Request an IP PIN at IRS.gov for yourself and each dependent. It is free, and it stops anyone from filing a tax return with your SSN, which is one of the most common uses of stolen school-employee data.
Step 5: Watch medical and Medicaid statements
Review explanation-of-benefits letters for services you did not receive and report anything unfamiliar to your state Medicaid agency or insurer right away.
Step 6: Remove your details from data broker sites
Criminals pair stolen SSNs with your current address, phone number and relatives' names from people-search sites to pass identity checks and run convincing phone scams. Taking that information down shrinks what a thief can do with the breach. You can opt out of each broker by hand or use one of the best data removal services to do it continuously.
Close the Gap Monitoring Leaves Open
TransUnion monitoring tells you after someone uses your data. PrivacyOn removes your name, address, phone number and family connections from 100+ data brokers and people-search sites, re-removes you when they relist you, and includes dark web monitoring. Family plans cover up to 5 people — useful when both a parent and a child received letters — from $8.33/month. Start with a free exposure scan.
Frequently Asked Questions
How do I know if I was affected by the Frontline Education data breach?
Frontline is mailing letters to affected people on behalf of school districts, starting around October 26, 2026. Some districts opted to send their own notices instead. If you work or worked for a district that uses Frontline Central, or your child's school uses Frontline's School Health Management, contact the district's HR or nursing office to ask whether your records were included.
Is the Frontline Education breach letter from Cyberscout legitimate?
Yes. Frontline's notification and identity-protection services are handled by Cyberscout, a TransUnion company, and district administrators confirmed the letters are genuine. Still, never enroll through a link in an unsolicited email or text. Use the address and code printed on your letter.
What did Frontline Education offer people affected by the breach?
Adults get two years of free credit monitoring and identity theft protection through TransUnion. Minors get free cyber monitoring. Frontline says it is covering notification and identity-protection costs for districts that let it handle the notices.
Can I join the Frontline Education class action lawsuit?
At least six proposed class actions have been filed against Frontline Technologies Group. None has been certified or settled yet, so there is nothing to claim today. If a settlement is reached, affected people are usually notified by mail or email, and you can file a claim then. You do not need to hire a lawyer to stay eligible.
Is credit monitoring enough after the Frontline breach?
No. Monitoring only alerts you after fraud starts. Pair it with credit freezes for you and your children, an IRS IP PIN, and data broker removal. PrivacyOn handles the removal side across 100+ sites with 24/7 monitoring, from $8.33/month.
Were passwords exposed in the Frontline Education breach?
Frontline has not said passwords were exposed. The main risk comes from government ID numbers and dates of birth, which cannot be changed. Even so, if you reuse your Frontline login elsewhere, change it and turn on two-factor authentication.