A review of state breach filings found at least 1,298,917 people affected by the August 2026 data breach at K-12 software provider Frontline Education.
The count reported by SecurityWeek covers filings in Massachusetts, New Hampshire, South Carolina, Texas and Vermont. Frontline has not disclosed a company-wide total, and additional state notices could increase the figure.
Frontline said its security team identified a vulnerability in a third-party software product on August 14, allowing unauthorized access to part of its environment. The company said the last day of unauthorized activity was August 15, and that the incident involved Frontline Central and School Health Management. In its October 26 notice, Frontline said it had remediated the vulnerability, worked with an independent cybersecurity firm and engaged law enforcement.
The information involved varies by person and may include Social Security numbers, dates of birth, driver’s license numbers, passport numbers, other government IDs, Medicaid IDs and student IDs. The affected systems support school districts’ administrative and school-health operations.
South Carolina’s official breach-notice list reports 493,535 affected residents in that state alone. Frontline also filed notices in California, Indiana and Iowa, and the company’s total number of affected individuals remains undisclosed.
Frontline said it is offering affected adults in the United States two years of credit monitoring and cyber monitoring for minors through TransUnion at no cost.




SIGN UP FOR NEWSLETTERS
Please confirm your email address.
Sign up for cybersecurity newsletter and get latest news updates delivered straight to your inbox. You are also consenting to our Privacy Policy and Terms of Use.