WORLDTECHFrontline Education Breach Affects 3,085,266 School Staff and Students
Frontline Education, a provider of administration software for K-12 schools, has told Indiana regulators that an August data breach reached more than 3 million school district staff and students. According to SecurityWeek, which reported the filing, the company counts 3,085,266 affected individuals.
Scale of the confirmed figures
The Indiana filing puts the number of affected people at 3,085,266, well over twice the roughly 1.3 million that Frontline's earlier filings with several other states had added up to.
Frontline describes the August event as a data breach, meaning data left the organisation without permission.
Intrusion and containment timeline
The company says it detected the intrusion on August 14 and that the attack was brought under full control the day after.
According to Frontline, the attackers reached part of its environment by exploiting a flaw in a third-party software product. The company has not identified that product.
Data taken and support offered
Personal information of school district employees and students was taken from two Frontline products, Frontline Central and School Health Management. The compromised details differ from person to person.
Affected adults in the US are receiving two years of free credit monitoring and identity theft protection, and eligible minors are getting free dark web monitoring.
What remains unconfirmed
Frontline has not said who carried out the attack, and no known cybercrime group appears to have claimed it. The figures come from the company's filings as reported by SecurityWeek.
Open questions
- Which third-party software product was exploited to gain access?
- Who was behind the attack, and has any group claimed responsibility?