Frontline Technologies Group LLC, operating as Frontline Education, disclosed a data breach that affected customer data within its Frontline Central and School Health Management platforms. On August 14, 2026, the company discovered unauthorized activity linked to the exploitation of a vulnerability in a third-party software product. Unauthorized access occurred between August 14 and August 15, 2026, prompting Frontline to remediate the vulnerability, hire an independent cybersecurity firm, and alert law enforcement. Frontline began distributing notification letters to impacted individuals on or about October 26, 2026.
Regulator filings in Massachusetts, New Hampshire, and Vermont confirm that at least 27,010 residents were affected across those three states, including 16,550 in Massachusetts, 7,475 in New Hampshire, and 2,985 in Vermont. Filings were also submitted in states such as South Carolina, while certain downstream school districts reported separate employee counts. The exposed information included Social Security numbers, driver's license numbers, passport numbers, other government identifiers, Medicaid identification numbers, student IDs, dates of birth, names, email addresses, and physical addresses. Financial account data and clinical medical records have not been reported as compromised.
The full nationwide total of affected individuals has not been publicly stated by Frontline. Because investigations into school district vendor systems often expand across multiple jurisdictions, additional details regarding total impact numbers may emerge as regulatory disclosures continue.