Frontline Education breach affects more than 3 million people

Frontline Education reported the total to the Indiana attorney general’s office. The figure is more than twice the roughly 1.3 million people listed in the company’s earlier filings with several other states.

The K-12 school administration software provider detected the intrusion on Aug. 14 and contained it the following day. Frontline has not identified the third-party software involved or disclosed who carried out the attack.

Information was taken from Frontline Central and School Health Management, products used by schools and districts. The data varies by person and may include names, Social Security numbers, dates of birth, driver’s license numbers, passport and other government identification numbers, health insurance information such as Medicaid identification numbers, and student identification numbers.

U.S. adults whose information was affected are being offered two years of credit monitoring and identity theft protection. Eligible minors are being offered free monitoring of the dark web.

No known cybercrime group has claimed responsibility for the attack.