This page is intended for customer organizations who have received a communication from Frontline Education regarding a cybersecurity incident. Frontline is communicating directly with affected school districts and, in cooperation with those districts, is notifying individuals whose personal information was affected. This page provides additional information and explains the support available to eligible individuals. About the Incident In August 2026, Frontline identified a vulnerability in a third-party software product that allowed unauthorized access to a portion of our environment that contains data related to Frontline Central and School Health Management products. Frontline promptly investigated the issue with the assistance of an independent cybersecurity firm, remediated the vulnerability, engaged with law enforcement, and implemented additional safeguards to further strengthen its systems. All products are available, operating normally, and secure. Frontline has notified all affected school districts via email to two points of contact, and, in cooperation with those districts, will be notifying individuals whose personal information was affected where appropriate. Districts that do not or have not used Frontline Central and/or School Health Management were not impacted by this incident and will not receive a notice. What Information Was Involved The information involved varies by school district and by individual. Frontline conducted a detailed review of the affected information to determine what personal information was involved and to whom it relates. If you received a notice from frontline@notifications.cyberscout.com or from Frontline (no-reply@support.frontlineed.com), please review it carefully. The notice identifies the categories of personal information associated with your district and explains the resources available. If you have questions, you can email us at frontline@transunion.com. What Frontline Is Doing Frontline has: Remediated the vulnerability and validated the remediation with the assistance of an independent cybersecurity firm. Implemented additional security controls and safeguards and strengthened its monitoring, security alerting, and response capabilities. Engaged with law enforcement. Contacted all affected school districts and offered to assist with individual notification efforts. This page will be updated as additional information becomes available. FAQs Is the notice I received legitimate? Yes, Frontline has sent notices to all school districts whose staff and/or students’ personal information was impacted from frontline@notifications.cyberscout.com or from Frontline (no-reply@support.frontlineed.com). Please follow the instructions in the notice to receive the information you need. Was my district affected? Frontline is communicating directly with affected districts. If you do not use or have not used Frontline Central and/or School Health Management and have not received a notification from Frontline or TransUnion, your district has not been impacted. All notifications to impacted districts have been sent. What solutions were impacted? Frontline Central and School Health Management. What information was involved? Information varies by district and individual. If your district was notified, follow the instructions in the notification email. Visit Frontline-TransUnion.com and enter your unique passcode. Some districts shared that their notifications went to spam. How can I be sure that I am not impacted? The communications came from frontline@notifications.cyberscout.com or from Frontline (no-reply@support.frontlineed.com). Please check your spam folder for a message from that address. If you have not and do not use Frontline Central or School Health Management and have not received a notification, your district has not been impacted. To whom were the notifications sent? To ensure this important information reached the right audience, notifications were sent to our primary contact points — typically superintendents, chief human resources officers, or their deputies, where their contact information was available. Can we continue using Frontline products? Yes. All products are working as they should and are secure. I requested my data files from TransUnion but haven’t received them yet. We targeted providing the data file within two business days, after we completed our final quality check and review. The data sets are complex and to confirm the accuracy of the data we are providing, we are taking additional time to validate the analysis and data sets to ensure that the information we provide is as complete and comprehensive as possible. We appreciate your patience and understanding and expect TransUnion to deliver the files within the next few days.