What is confirmed
Frontline Education says it identified a third-party software vulnerability in August that allowed unauthorised access to part of its environment.
The affected environment held information related to Frontline Central and School Health Management. The company is working with affected districts on notifications.
What it means
Reporting mentions personal information related to school employees; exact data categories depend on individual notices.
The incident illustrates software supply-chain risk: a vulnerability at one vendor can affect multiple customers without each being directly attacked.
What this incident reveals
Reporting mentions personal information related to school employees; exact data categories depend on individual notices.
Practical steps to take
Check official Frontline or district notifications for the precise scope.
Watch for phishing that uses school or work-related personal details.
What to do
Check official Frontline or district notifications for the precise scope.
Watch for phishing that uses school or work-related personal details.
Schools should reassess third-party access, retention periods and notification procedures.
Use the related SecurCheck tool, then confirm important decisions with an official source.
