Science & Tech · Cybersecurity · 7 hrs ago
Frontline Education breach affected more than 3 million people
Frontline Education says a data breach affected 3,085,266 people after attackers accessed part of its systems in August.
The company provides software used by K-12 schools and reported the updated total to Indiana’s attorney general.
The stolen information came from two products, Frontline Central and School Health Management, and belonged to school district employees and students.
Depending on the person, it may include Social Security numbers, birth dates, government ID details, health insurance information and student IDs.
The breach total is more than twice the roughly 1.3 million people listed in Frontline’s earlier filings with several other states.
The company says attackers exploited a vulnerability in a third-party software product, and it contained the intrusion the day after detecting it on August 14.
Affected adults in the US can get two years of free credit monitoring and identity theft protection, while eligible minors can get free dark web monitoring.
Frontline has not named the software product or the attackers.
Frontline Education reported that a data breach affected 3,085,266 people.
The K-12 school administration software provider said attackers exploited a vulnerability in a third-party software product to access part of its environment.
The intrusion was detected on August 14 and was fully contained the next day.
Personal information was stolen from school district employees and students who used Frontline Central and School Health Management.
The compromised information may include Social Security numbers, government ID numbers, health insurance information and student IDs.
- Who
- Frontline Education and more than 3 million affected people, including school district employees and students.
- What
- A data breach exposed personal information from two Frontline products.
- When
- The intrusion was detected on August 14 and contained the next day; the breach occurred in August.
- Where
- Frontline reported the breach to the Indiana Attorney General’s Office. The location of the compromised systems is not stated.
- Why
- Attackers accessed part of Frontline’s environment by exploiting a vulnerability in a third-party software product.
This story does not have two clearly opposing sides.
Frontline detected the intrusion.
Frontline said the attack was fully contained.
SecurityWeek reported that Frontline informed the Indiana Attorney General’s Office the breach affected 3,085,266 people.
- Affected people
- 3,085,266
- Products involved
- Frontline Central and School Health Management
- Attack method
- Exploitation of a vulnerability in a third-party software product
- Detection date
- August 14
- Containment
- The next day
- Reported to
- Indiana Attorney General’s Office