WAYNE, Pa. — October 26, 2026— Frontline Education, a leading provider of administration software purpose-built for K-12, today announced that it has begun sending notification letters to individuals whose data was impacted in the August 2026 cybersecurity incident involving Frontline Central and School Health Management. The incident has been fully remediated. Frontline launched a webpage to provide additional information about the security incident. What happened: On August 14, 2026, our security team identified a vulnerability in a third-party software product we use that allowed unauthorized access to a portion of the environment beginning on August 14, 2026. We promptly investigated the issue with the assistance of an independent cybersecurity firm, remediated the vulnerability, engaged with law enforcement, and took steps to further reinforce the security of our systems. The last day of unauthorized activity was August 15. We remain committed to protecting the security of our customers’ data and continuously strengthening our security practices. What Personal Information was involved: Frontline conducted a thorough and time-intensive analysis of the impacted files to determine what personal information they contained and to whom that information belongs. Although the information for each individual varies, we have determined that the following data elements were impacted: Social Security number, dates of birth, driver’s license number, passport number, other government ID, Medicaid ID, Student ID. What we are doing: Frontline has notified affected school districts and, in cooperation with those districts, has begun notifying individuals whose personal information was affected via email or by letter sent via the U.S. Postal Service, as required and where available. The company is offering adults in the U.S. two years of credit monitoring and cyber monitoring for minors at no cost through TransUnion. The notices provide the nature of the information involved and contact details for the dedicated TransUnion call center established to assist with enrollment for eligible individuals and to address any inquiries related to the incident. Individual notifications were issued starting on or about October 26, 2026. In addition to the comprehensive security measures the company had in place prior to the incident, it has taken steps to further safeguard its systems, including enhancing its security and monitoring controls. The company will continue to advance its IT security and data privacy controls to stay ahead of the ever-evolving threat landscape. What you can do: In addition to enrolling in the credit monitoring services being offered to eligible individuals whose data was impacted at no charge, the company encourages affected individuals to take additional precautions: Remain vigilant against threats of identity theft or fraud and regularly review and monitor account statements and credit histories for any signs of unauthorized transactions or activity. Individuals who suspect they are the victim of identity theft or fraud should contact their local police. For more information: Frontline has established a dedicated call center to answer questions about the cybersecurity event as well as the TransUnion services that we are offering to those whose personal data was impacted. If you have any questions, please call the TransUnion call center at 1-800-759-7279 from 8 a.m. to 8 p.m. ET Monday through Friday, excluding major U.S. holidays. ________________________________ About Frontline Education Frontline Education is a leading provider of school administration software, supporting more than 10,000 K-12 organizations nationwide. Our solutions span three key areas — Human Capital Management, Student Solutions, and Business Operations— helping school systems operate efficiently and deliver better outcomes for students and staff. A part of Roper Technologies (NASDAQ: ROP), Frontline combines long-term stability with a commitment to innovation in K-12 education. We’re proud to be recognized with a 2025 Glassdoor Best Places to Work award, reflecting our people-first culture and dedication to those who serve our schools. _________________________________ Additional information for US residents U.S. customers are entitled under U.S. law to one free credit report annually from each of the three major credit bureaus. To order your free credit reports, visit www.annualcreditreport.com or call toll-free +1 (877) 322-8228. You may contact the U.S. Federal Trade Commission (FTC) for information on fraud alerts, security freezes, and how to protect yourself from identity theft. The FTC can be contacted at 400 7th St. SW, Washington, DC 20024; telephone +1 (877) 382-4357 or www.consumer.gov/idtheft. Your state Attorney General may also have advice on preventing identity theft, and you should report instances of known or suspected identity theft to law enforcement, your state Attorney General, or the FTC. California residents: Visit the California Office of Privacy Protection (https://oag.ca.gov/privacy) for additional information on protection against identity theft. The Attorney General can be contacted at Office of the Attorney General of California, 1300 I Street, Sacramento, CA 95814, Telephone: 1-800-952-5225. Colorado Residents: The Attorney General can be contacted at the Office of the Attorney General, Colorado Department of Law, Ralph L. Carr Judicial Building, 1300 Broadway, 10th Floor, Denver, Colorado 80203; +1 (720) 508-6000 or https://coag.gov/. Delaware Residents: The Attorney General can be contacted at Delaware Attorney General, Carvel State Office Building, 5th Floor, 820 N. French St., Wilmington, DE 19801, https://attorneygeneral.delaware.gov/, Telephone: 1-302-577-8500. District of Columbia residents: The District of Columbia Attorney General may be contacted at: 400 6th Street, NW, Washington, DC 20001; +1 (202) 727-3400, oag@dc.gov and www.oag.dc.gov. Florida residents: The Attorney General can be contacted at the Office of Attorney General of Florida, PL-01, The Capitol, Tallahassee, Florida, 32399-1050; +1 (866) 966-7226 or www.myfloridalegal.com. Iowa residents: The Attorney General can be contacted at the Office of Attorney General of Iowa, Hoover State Office Building, 1305 E. Walnut Street, Des Moines, Iowa 50319; +1 (515) 281-5164, www.iowaattorneygeneral.gov. Kentucky residents: The Attorney General can be contacted at the Office of the Attorney General of Kentucky, 700 Capitol Avenue, Suite 118 Frankfort, Kentucky 40601, www.ag.ky.gov, Telephone: +1 (502) 696-5300. Maryland residents: The Attorney General can be contacted at Office of Attorney General, 200 St. Paul Place, Baltimore, Maryland 21202; +1 (888) 743-0023 or www.marylandattorneygeneral.gov. Massachusetts residents: Under Massachusetts law, you have the right to obtain any police report filed in connection with the cybersecurity event. If you are the victim of identity theft, you also have the right to file a police report and obtain a copy of it. Missouri Residents: The Attorney General can be contacted at the Attorney General Office of Missouri, Supreme Court Building, 207 W. High St., P.O. Box 899, Jefferson City, MO 65102, https://ago.mo.gov/, Telephone: 1-573-751-3321. North Carolina residents: The Attorney General can be contacted at the Office of the Attorney General, 9001 Mail Service Center, Raleigh, NC 27699-9001; +1 (919) 716-6400 or www.ncdoj.gov. New Jersey Residents: The Attorney General can be contacted at the Office of the Attorney General – New Jersey State Division of Consumer Affairs, Richard J. Hughes Justice Complex, 25 Market Street, Trenton, New Jersey 08611, https://www.njoag.gov/, Telephone: 973-504-6200. New Mexico residents: You have rights under the federal Fair Credit Reporting Act (FCRA), which governs the collection and use of information pertaining to you by consumer reporting agencies. For more information about your rights under the FCRA, please visit https://www.ftc.gov/system/files/ftc_gov/pdf/fcra-march-2026.pdf or www.ftc.gov. New York residents: The Attorney General can be contacted at the Office of the Attorney General, The Capitol, Albany, NY 12224-0341; +1 (800)-771-7755 or www.ag.ny.gov. Oregon residents: The Attorney General can be contacted at Oregon Department of Justice, 1162 Court Street NE, Salem, OR 97301-4096; +1 (877) 877-9392 (toll-free in Oregon), +1 (503) 378-4400, or www.doj.state.or.us. Pennsylvania Residents: The Attorney General can be contacted at the Pennsylvania Office of the Attorney General, Strawberry Square, Harrisburg, PA 17120, https://www.attorneygeneral.gov/, Telephone: 1-800-441-2555. Rhode Island residents: The Attorney General can be contacted at 150 South Main Street, Providence, Rhode Island 02903; +1 (401) 274-4400 or www.riag.ri.gov. You may also file a police report by contacting local or state law enforcement agencies. Texas residents: The Attorney General can be contacted at the Office of the Attorney General, 300 W 15th St, Austin, Texas 78701; +1 (512) 463-2100 or www.texasattorneygeneral.gov. Virginia Residents: The Attorney General can be contacted at the Office of the Attorney General of Virginia, 202 North Ninth Street, Richmond, VA 23219, https://www.oag.state.va.us/, Telephone: 804-786-2071. Washington Residents: The Attorney General can be contacted at the Office of the Attorney General, 1125 Washington St. SE, P.O. Box 40100, Olympia, WA 98504-0100, https://www.atg.wa.gov/, Telephone: 1-360-753-6200. For Arizona, California, District of Columbia, Iowa, Montana, North Carolina, Washington and West Virginia residents: You may obtain one or more (depending on the state) additional copies of your credit report, free of charge. You must contact each of the credit bureaus directly to obtain such additional report(s). All US Residents: Identity Theft Clearinghouse, Federal Trade Commission, 600 Pennsylvania Avenue, NW Washington, DC 20580, https://consumer.ftc.gov, 1-877-IDTHEFT (438-4338), TTY: 1-866-653-4261. More Information About Identity Protection Information on Obtaining a Free Credit Report U.S. customers are entitled under U.S. law to one free credit report annually from each of the three major credit bureaus. To order your free credit reports, visit www.annualcreditreport.com or call toll-free +1 (877) 322-8228. Information on Implementing a Fraud Alert or a Security Freeze You can contact the three major credit bureaus at the addresses below to place a fraud alert on your credit report. A fraud alert indicates to anyone requesting your credit file that you suspect you are a possible victim of fraud. A fraud alert does not affect your ability to get a loan or credit. Instead, it alerts a business that your personal information might have been compromised and requires that business to verify your identity before issuing you credit. Although this may cause some short delay if you are the one applying for the credit, it might protect against someone else obtaining credit in your name. A security freeze prohibits a credit reporting agency from releasing any information from a consumer’s credit report without written authorization. However, please be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, credit, mortgages, employment, housing, or other services. A credit reporting agency may not charge you to place, temporarily lift, or permanently remove a security freeze. To place a fraud alert or a security freeze on your credit report, you must contact the three credit bureaus below: Equifax Experian TransUnion Consumer Fraud Division Credit Fraud Center TransUnion LLC P.O. Box 740256 P.O. Box 9554 P.O. Box 2000 Atlanta, GA 30374 Allen, TX 75013 Chester, PA 19022-2000 (888) 378-8228 (888) 397-3742 (800) 680-7289 www.equifax.com www.experian.com www.transunion.com To request a security freeze, you will need to provide the following information: Your full name (including middle initial as well as Jr., Sr., II, III, etc.); Social Security number; Date of birth; If you have moved in the past five (5) years, the addresses where you have lived over those prior five (5) years; Proof of current address such as a current utility bill or a telephone bill; and A legible photocopy of a government-issued identification card (state driver’s license or ID card, military identification, etc.). You may also contact the U.S. Federal Trade Commission (FTC) for further information on fraud alerts, security freezes, and how to protect yourself from identity theft. The FTC can be contacted at 400 7th St. SW, Washington, DC 20024; telephone +1 (877) 382-4357 or www.consumer.gov/idtheft. FAQs What happened? On August 14, 2026, our security team identified a vulnerability in a third-party software product we use that allowed unauthorized access to a portion of the environment in Frontline Central and School Health Management. We promptly investigated the issue with the assistance of an independent cybersecurity firm, remediated the vulnerability, engaged with law enforcement, and took steps to further reinforce the security of our systems. Our investigation is complete and we are working directly with and providing updates to our customers as appropriate. We remain committed to protecting the security of our customers’ data and continuously strengthening our security practices. What type of data was impacted? Your individual data impacted was included in the notification email or letter you received from TransUnion on behalf of Frontline. When and how were notifications sent? Frontline is notifying individuals whose personal information was affected as required by email and U.S. Mail, where available, starting on or about October 26, 2026. Additionally, we have provided “substitute notice” which is an alternative way of notifying someone when the usual method—such as mailing a letter or delivering papers personally—is impractical or unsuccessful. It involved Frontline posting the notice online and distributing a press release. Has the event been resolved/contained? We believe that our efforts stopped the attack, and our cybersecurity experts have not seen any unauthorized activity since August 15, 2026. Are you aware of the misuse of any data? We are not aware of any examples of data misuse as a result of the incident. Was law enforcement notified? Yes, law enforcement was notified, and we offered our full cooperation to them. What actions are you taking to better secure Frontline’s network in response to this event? We have taken additional steps to deploy enhanced security controls and safeguards and have increased and fortified monitoring and security alerting and response. As part of our ongoing security operations, we regularly review our security and privacy policies and procedures and implement changes when needed to enhance our information security and privacy programs and controls. Would Frontline reach out to me directly to request my personal information? No, Frontline will never contact you by phone or email to request your personal or account information. You may receive an email from TransUnion on behalf of Frontline, which will provide information about enrolling in TransUnion services, as applicable.