Frontline Education has informed the Indiana Attorney General’s Office that a data breach it suffered in August affected more than 3 million people.
The K-12 school administration software provider puts the total number of affected individuals at 3,085,266. That is well over twice the figure from the company’s earlier filings with several other states, which added up to roughly 1.3 million.
Frontline says the attackers got into part of its environment by exploiting a vulnerability in a third-party software product. The company detected the intrusion on August 14 and says the attack was fully contained the next day.
The hackers stole the personal information of school district employees and students from two Frontline products: Frontline Central and School Health Management.
The compromised information varies from person to person. It may include names, Social Security numbers, dates of birth, driver’s license numbers, passport and other government ID numbers, health insurance information such as Medicaid IDs, and student IDs.
Affected adults in the US are getting two years of free credit monitoring and identity theft protection. Eligible minors are getting free dark web monitoring.
Frontline has not named the exploited third-party product or said who was behind the attack.
No known cybercrime group appears to have taken credit for an attack on the company.
Related: DigiCert Data Breach Impacts Business Customer Information
Related: Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
Related: Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
