Student SSNs and Medicaid IDs Exposed in School Software Breach

If your school district used Frontline Central or School Health Management, your Social Security number, date of birth, or government ID could have been caught up in a cybersecurity incident. That risk applies to some adults and minors whose information was processed through those products.

Frontline Education announced Oct. 26, 2026, that it had begun sending notification letters to people affected by an August 2026 cybersecurity incident.^[1] The company hasn't disclosed the total number of affected people nationwide.

The exposed data varied by person, but it included Social Security numbers, dates of birth, driver's license numbers, passport numbers, other government IDs, Medicaid IDs, and Student IDs.

Frontline is offering adults in the U.S. two years of credit monitoring and minors cyber monitoring at no cost through TransUnion. Here's what happened, what it means, and what steps to take.

Thanks for subscribing!

Please check your email for your first message.

Never miss the privacy news that affects you.

Join thousands who get the latest security news, scams, and policy changes every week, right to their inbox.

Sign me up

By submitting this form you agree to receive emails from All About Cookies and to the privacy policy and terms.

What happened in the Frontline Education data breach

Frontline Education said in its notice that its security team identified a vulnerability in a third-party software product on Aug. 14, 2026. The vulnerability allowed unauthorized access to a portion of Frontline's environment beginning that same day.

The last day of unauthorized activity was Aug. 15, 2026. Frontline said the incident affected information processed through Frontline Central and School Health Management.

Individual notifications started on or about Oct. 26, 2026. Frontline hasn't publicly disclosed how many people or school districts were affected, and it hasn't named the third-party software product that was exploited.

The impacted data elements varied by person and could have included:

• Social Security number
• Date of birth
• Driver's license number
• Passport number
• Other government ID
• Medicaid ID
• Student ID

Frontline said it remediated the vulnerability, worked with an independent cybersecurity firm, engaged law enforcement, enhanced security and monitoring controls, and notified affected school districts. It also said it isn't aware of any examples of data misuse resulting from the incident.

What this means for Frontline Education users

This is an identity theft risk, especially for people whose Social Security numbers or government ID numbers were exposed. Criminals can use that information to open accounts, file fraudulent tax returns, pass identity checks, or build more convincing phishing messages.

The risk is especially serious for minors. A child's Social Security number or government ID can be misused for years before anyone notices because children usually don't apply for credit or check reports regularly.

Medicaid IDs and Student IDs can also cause headaches. They could be used in benefits fraud, medical identity theft attempts, or school-themed scams that look more believable because the attacker has real personal details.

According to an identity theft survey by All About Cookies, data breaches are the leading cause of identity theft. Nearly two in five identity theft victims (38%) said a data breach was how criminals accessed their information.

The biggest issue is that some of this data can't simply be changed. A new password can fix a password leak, but a stolen Social Security number, date of birth, or government ID can follow you for a long time.

What to do right now after the Frontline Education data breach

Start with the notice letter if you receive one, then lock down the data that's hardest to replace.

1. Use Frontline's free monitoring offer. Frontline is offering adults in the U.S. two years of credit monitoring and minors cyber monitoring at no cost through TransUnion. Follow the instructions in your notice letter, or call the TransUnion call center at 1-800-759-7279 from 8 a.m. to 8 p.m. ET Monday through Friday, excluding major U.S. holidays.
2. Freeze your credit. If your SSN was exposed, place a free freeze with Equifax, Experian, and TransUnion. A freeze helps block criminals from opening new credit in your name, and you can learn how to do it in this guide to freezing your credit.
3. Check for child identity theft. If your child was affected, ask the major credit bureaus whether a credit file exists in the child's name. A file shouldn't normally exist unless credit has been opened, so treat any unexpected file as a red flag.
4. Watch tax, benefits, and medical accounts. Social Security numbers, Medicaid IDs, and dates of birth can be useful for tax refund fraud, benefits fraud, or medical identity theft. Review IRS notices, health plan statements, Medicaid communications, and school account messages for activity you don't recognize.
5. Be alert for phishing that uses school details. Scammers might reference your district, student records, Medicaid information, or the breach itself to make messages feel legitimate. If a message asks you to click a link, download a file, or share personal information, verify it through the school district or Frontline before responding. Here's how to spot phishing emails.
6. Consider longer-term identity theft protection. Free monitoring is useful, but exposed Social Security numbers and government IDs can create risk beyond the initial offer period. An identity theft protection service can help monitor for suspicious use of your information and guide you through recovery if fraud appears.

Bottom line

The Frontline Education data breach could have exposed high-risk personal information for adults and minors tied to affected school districts, including Social Security numbers and government IDs.

If you receive a notice, enroll in the free TransUnion monitoring, freeze credit where an SSN was exposed, and keep watching for school-themed phishing, tax fraud, benefits fraud, and medical identity theft.

4.8

AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

Editorial Rating

See Price

On Aura Identity Theft's website

2026 Editors’ Choice

Best Overall Identity Theft Protection Service

Identity Protection

Aura Identity Theft

• ID theft protection that monitors your SSN, bank accounts, credit cards, and brokerage and retirement accounts for suspicious activity
• Every plan includes the full feature set, so no additional cost to unlock monitoring, insurance, or restoration
• Bundles data removal with identity theft protection, antivirus, VPN, and a password manager in one subscription

Author Details

Kalleigh Lane

About the Author

Kalleigh Lane is the Managing Editor at All About Cookies, where she helped develop the site's star rating system for product reviews and specializes in testing VPNs, ad blockers, and parental controls on Android and PC. She brings more than five years of experience editing and writing across cybersecurity, tech, and finance, and she has authored and edited over 300 articles for All About Cookies. Before joining AAC, she worked as a journalist and editor at CTV News and the Globe and Mail, and she holds a Master of Arts in English Literature from the University of Toronto.