Toifalanmagan
Frontline Education ma'lumotlarining buzilishi 1,3 milliondan ortiq odamga ta'sir qildi
Xakerlar uchinchi tomon dasturiy ta'minotidagi kamchilikdan foydalanib, maktab okrugi xodimlari va o'quvchilarning shaxsiy ma'lumotlarini o'g'irlashdi.
Muallif
Ionut Arghire
| 2026-yil 3-noyabr (ET vaqti bilan 10:32)
*
Frontline Education 1,3 milliondan ortiq odamga ularning shaxsiy ma'lumotlari ma'lumotlar buzilishida buzilganligi haqida xabar bermoqda.
Hodisa 14-avgustda sodir bo'lgan va uchinchi tomon dasturiy ta'minot mahsulotidagi zaiflikdan foydalanib, Frontline muhitiga ruxsatsiz kirish olishni o'z ichiga olgan.
K-12 maktab okruglari uchun maxsus ishlab chiqilgan boshqaruv dasturiy ta'minotini taqdim etuvchi Frontline xavfsizlik kamchiligini bartaraf etib, xavfsizlikni mustahkamladi. Kompaniya hodisa haqida xabar berishicha, hujum 15-avgustga qadar to'liq to'xtatilgan.
Ma'lumotlar buzilishi bo'yicha tekshiruv xakerlar Frontline Central va School Health Management mahsulotlaridan maktab okrugi xodimlari va o'quvchilarning shaxsiy ma'lumotlarini o'g'irlaganini aniqladi.
O'g'irlangan ma'lumotlar shaxsga qarab farq qilsa-da, ular ismlar, ijtimoiy ta'minot raqamlari, tug'ilgan sanalar, haydovchilik guvohnomasi raqamlari, pasport va boshqa davlat ID raqamlari, Medicaid IDlari kabi tibbiy sug'urta ma'lumotlari va O'quvchi IDlarini o'z ichiga olishi mumkin.
"Frontline ta'sirlangan maktab okruglariga xabar berdi va ushbu okruglar bilan hamkorlikda shaxsiy ma'lumotlari ta'sirlangan shaxslarni elektron pochta orqali yoki AQSh pochta xizmati orqali yuborilgan xat orqali, talab qilingan va mavjud bo'lgan joylarda xabardor qilishni boshladi", — deydi kompaniya.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Frontline potentsial ta'sirlangan shaxslar sonini e'lon qilmagan bo'lsa-da, Massachusets, Nyu-Xempshir, Janubiy Karolina, Texas va Vermont shtatlaridagi Bosh prokuror idoralariga taqdim etilgan hujjatlar 1 298 917 kishi ta'sirlanganini ko'rsatadi.
Biroq, kompaniya Kaliforniya, Indiana va Ayova shtatlaridagi Bosh prokuror idoralariga ham xabar bergan va ehtimol ma'lumotlar buzilishi portallarini yuritmaydigan boshqa shtatlarda ham, va ta'sirlangan shaxslarning umumiy soni 1,3 milliondan ancha yuqori bo'lishi mumkin.
Frontline ta'sirlangan AQSh kattalariga ikki yillik bepul kredit monitoringi va shaxsni o'g'irlashdan himoya qilish xizmatlarini taqdim etmoqda. Malakali voyaga yetmaganlar uchun esa bepul qorong'u veb monitoring xizmatlarini taklif qiladi.
SecurityWeek Frontline'dan ma'lumotlar buzilishi haqida qo'shimcha ma'lumot olish uchun elektron pochta yubordi va agar kompaniya javob bersa, ushbu maqolani yangilaydi.
Bog'liq: Florida Talaba Yordami Veb-sayti Buzilishi 4,9 Million Kishi Ma'lumotlarini Xavf Ostiga Qo'yadi
Bog'liq: Revolve Ma'lumotlar Buzilishi Kamida 200 000 Kishi Ta'sir Qildi
Bog'liq: Chainalysis AI Boshqariladigan Kiberhujumdan Keyin Ma'lumotlar Buzilishini E'lon Qildi
Bog'liq: Polymarket DebugBear DNS O'g'irlashini Keltirib, Savdogarlarga 3,9 Million Dollarni Qaytardi
Muallif Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbir.
Kundalik Xabar Byulleteni
Eng so'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek Elektron Pochta Byulleteniga obuna bo'ling.
Biznes Elektron Pochta*
emailsignupsource
Qo'shimcha ma'lumot olish uchun Maxfiylik Siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Revolve Ma'lumotlar Buzilishi Kamida 200 000 Kishi Ta'sir Qildi
- Google $250 000 Ildiz-bulut Xato Mukofotini Joriy Etdi
- Zararli Claude Code Kengaytmasi Cursor Ta'minot Zanjiri Hujumida Xizmat Ko'rsatdi
- Chainalysis AI Boshqariladigan Kiberhujumdan Keyin Ma'lumotlar Buzilishini E'lon Qildi
- PHP2Shell Hujumlari Palo Alto Firewall'larini Ildizga Tushirdi, Ammo WordPress'ga Qarshi Muvaffaqiyatsiz Bo'ldi
- O'q o'tkazmaydigan Xost Virtualine FBI Musodara Qilish Natijasida Domenini Yo'qotdi
- Yangi WordPress Zaifligi Hujumchilarning Diqqat Markazida
- Maksimal Jiddiylikdagi GitLab Zaifligi Alpine Linux'ga Qarshi Hujumlarda Foydalanildi
So'nggi Yangiliklar
- CrowdStrike Xabar Berishicha, AI Xavfsizlik Firmalari Fiddler va Dreadnode uchun 495 Million Dollar To'lamoqda
- Android'ning 2026-yil Noyabr Yangilanishlari 200 dan Ortiq Zaifliklarni Tuzatadi
- Kritik Node-RED Kamchiligi Hujumlarda Foydalanilmoqda
- Buyuk Britaniya Kiber Rahbari 2028-yilga Qadar Buyuk Britaniya Muhim Infratuzilmasiga AI Kiberhujumlari Bo'lishini Aytadi
- Google 1,3 Million Android Qurilmalaridan Iborat XCPE Botnetini Yo'q Qildi
- NATO'ning Crossed Swords Mashqi AI Agentlarini Kiber Operatsiyalar Treningiga Kiritadi
- 100 dan Ortiq Yevropa Do'konlari Supermarket Sovutgich Hujumlari Qaytishi Bilan Ta'sirlandi
- Kiberxavfsizlik M&A Xulosa: 2026-yil Oktyabrda 37 Shartnoma E'lon Qilindi
Trend
Zararli Claude Code Kengaytmasi Cursor Ta'minot Zanjiri Hujumida Xizmat Ko'rsatdi
Ivanti Connect Secure Hujum Zanjirida Foydalanilgan Yana Ikkita Nol Kun Zaifligini Tuzatdi
FBI Shimoliy Koreyaning Binance O'g'irligiga Bog'liq 600 dan Ortiq Manzilni Belgiladi
PHP2Shell Hujumlari Palo Alto Firewall'larini Ildizga Tushirdi, Ammo WordPress'ga Qarshi Muvaffaqiyatsiz Bo'ldi
Revolve Ma'lumotlar Buzilishi Kamida 200 000 Kishi Ta'sir Qildi
Kiberxavfsizlik M&A Xulosa: 2026-yil Oktyabrda 37 Shartnoma E'lon Qilindi
Northstar Security Toksik Xavf Kombinatsiyalarini Fosh Etish Uchun 7 Million Dollar Bilan Yashirin Rejimdan Chiqdi
Google $250 000 Ildiz-bulut Xato Mukofotini Joriy Etdi
Kundalik Xabar Byulleteni
Eng so'nggi tahdidlar, tendentsiyalar va texnologiya haqida xabardor bo'lish, shuningdek, soha mutaxassislarining mazmunli ustunlaridan foydalanish uchun SecurityWeek Elektron Pochta Byulleteniga obuna bo'ling.
Biznes Elektron Pochta*
emailsignupsource
Qo'shimcha ma'lumot olish uchun Maxfiylik Siyosatimizni o'qing.
Vebinar: Agentik Pentesting Kuchliroq CTEM Dasturi Uchun
2026-yil 4-noyabr
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Ushbu sessiyaga qo'shiling va agentik pentestingni o'rganing hamda CTEM dasturingizda doimiy ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan o'ting
Virtual Tadbir: CISO Forum 2026 Sammiti
2026-yil 10 va 11-noyabr
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashtirganimizda bizga qo'shiling.
Ro'yxatdan o'ting
Harakatdagi Odamlar
Barracuda Dan Fletcher'ni CFO etib tayinladi.
Artemis Security Arun Singh'ni CGO etib tayinladi.
General Paul M. Nakasone Armadin Kengashiga qo'shildi.
Harakatdagi Ko'proq Odamlar
Mutaxassis Fikrlari
*
Parollar Passkey'lardan Yaxshiroq. Ammo Ular Yetarli Emas.
Tashkilotlar parollarni yo'q qilgan sari, hujumchilar moslashadi. Autentifikatorga to'g'ridan-to'g'ri hujum qilish o'rniga, ular uning atrofidagi imkoniyatlarni qidiradilar.(Torsten George)
Xavf Shaxsiy Bo'lganda: Xavfsizlik Rahbarlari Saraton Tashxisidan Nima O'rganishi Mumkin
Xavf menejerlari zaif signallarni aniqlash, buzilishlarga tayyorgarlik ko'rish va noaniqlik sharoitida qiyin qarorlar qabul qilishga o'rgatilgan. Ammo intizom tizim yoki korxona emas, balki siz bo'lganingizda boshqacha ko'rinadi.(Steve Durbin)
Hech Kim Xavfsizlik So'rovnomasiga Ishonmaydi. Biz Baribir Unga Tayanamiz.
Deyarli har bir B2B shartnomasini nazorat qiladigan jarayon yuboruvchi ishonmaydigan va qabul qiluvchi qabul qiladigan o'z-o'zini baholashdir. Nihoyat kompaniyalar o'rtasida ishonch uchun yaxshiroq asos mavjud.(Sravish Sridhar)
Bu Yaxshi: NetScaler Nol Kun Zaifliklari Yangi Normal Haqida Nima Aytadi
Agar Citrix NetScaler tuzatishlarining yana bir to'plami tez orada chiqarilsa, tuzatish boshqaruv quvurlarini tayyor saqlang.(Tod Beardsley)
AI Dasturiy Ta'minot Xavfsizligining Kaliti Tezlik Emas, Balki Yetuklikdir
Sizning ishlab chiquvchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir ko'rsatadi.(Matias Madou)
Uncategorized
Frontline Education Data Breach Impacts Over 1.3 Million
Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.
By
Ionut Arghire
| November 3, 2026 (10:32 AM ET)
*
Frontline Education is notifying over 1.3 million people that their personal information was compromised in a data breach.
The incident occurred on August 14 and involved the exploitation of a vulnerability in a third-party software product to gain unauthorized access to Frontline’s environment.
Frontline, which provides administration software purpose-built for K-12 school districts, addressed the security defect and reinforced security. The attack was fully contained by August 15, the company says in an incident notice.
The investigation into the data breach determined that the hackers stole the personal information of both school district staff and students from the Frontline Central and School Health Management products.
While the stolen data varies by individual, it may include names, Social Security numbers, dates of birth, driver’s license numbers, passport and other government ID numbers, health insurance information such as Medicaid IDs, and Student IDs.
“Frontline has notified affected school districts and, in cooperation with those districts, has begun notifying individuals whose personal information was affected via email or by letter sent via the US Postal Service, as required and where available,” the company says.
Advertisement. Scroll to continue reading.
While Frontline has not shared the number of potentially affected individuals, filings with the Attorney General’s Offices in Massachusetts, New Hampshire, South Carolina, Texas, and Vermont show that 1,298,917 people were affected.
However, the company also filed notices with the AGOs in California, Indiana, and Iowa, and possibly in other states that do not maintain data breach portals, and the total number of affected individuals is likely well above 1.3 million.
Frontline is providing the affected US adults with two years of free credit monitoring and identity-theft protection services. For qualified minors, it offers free dark-web monitoring services.
SecurityWeek has emailed Frontline for additional information on the data breach and will update this article if the company responds.
Related:Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
Related:Revolve Data Breach Impacts at Least 200,000 People
Related:Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
Related:Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Revolve Data Breach Impacts at Least 200,000 People
- Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
- Malicious Claude Code Extension Served in Cursor Supply Chain Attack
- Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
- Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
- Fresh WordPress Vulnerability in Attackers’ Crosshairs
- Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
Latest News
- CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
- Android’s November 2026 Updates Patch Over 200 Vulnerabilities
- Critical Node-RED Flaw Exploited in Attacks
- UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028
- Google Dismantles XCPE Botnet of 1.3 Million Android Devices
- NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training
- Over 100 European Stores Hit as Supermarket Fridge Attacks Return
- Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
Trending
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
Revolve Data Breach Impacts at Least 200,000 People
Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Barracuda has appointed Dan Fletcher as CFO.
Artemis Security has appointed Arun Singh as CGO.
General Paul M. Nakasone has joined Armadin’s Board of Directors.
More People On The Move
Expert Insights
*
Passkeys Are Better Than Passwords. But They Are Not Enough.
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)