Frontline Education
bd_3e2174d6f70fcaf1 · schema v1 · pii pii-v2
Full breach record for Frontline Education →Frontline Education, a K-12 school administration software provider, notified the Iowa Attorney General of a data security event. On August 14, 2026, unauthorized access was gained via a vulnerability in a third-party software product. The incident involved the exfiltration of personal information, including Social Security numbers, driver's license numbers, passport numbers, and Medicaid IDs, belonging to staff and students of Iowa school districts. Frontline engaged forensic investigators and law enforcement, remediated the vulnerability, and began notifying affected individuals on October 26, 2026, offering credit monitoring services.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 14, 2026
Begins
Aug 14, 2026
Discovered
Oct 26, 2026
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- California State AGbd_1ecc310e6cb4bcf92026-10-26Verified
- New Hampshire State AGbd_3470dccbecae9aff2026-10-26Verified
- Vermont State AGbd_cb9f37e0d0ca81992026-10-27 · +1dVerified
- South Carolina State AGbd_e6523e105882bc3f2026-10-27 · +1dVerified
Show 3 more filings ↓Show fewer ↑up to 25d gap
- Texas State AGbd_77787c39f53c01dd2026-10-28 · +2dVerified
- California State AGbd_921d086636fc76892026-10-14 · +12dCandidate
- Massachusetts State AGbd_7d6394728eeacefb2026-10-01 · +25dVerified
Filing propagation · 8 filings · 7 states
View merged incident ↗Pattern: first filing Oct 1 (MA), last Oct 28 (TX) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.