tag

education

2 articles with this tag

2026-10-30

Florida Department of Education financial aid website breach (about 4.9 million people): Social Security numbers at risk — what to do

On October 29, 2026, the Florida Department of Education announced that its staff learned on October 19 of unauthorized criminal access to the Florida Student Financial Aid website (FloridaStudentFinancialAidSG.org). The department believes the incident was limited to that website and may have affected approximately 4.9 million individuals. The information potentially exposed may include Social Security numbers, first and last names, dates of birth, home addresses, phone numbers (including mobile numbers), email addresses and gender identification codes (M or F). Not all individuals were necessarily affected. It says anyone who previously applied for financial aid in Florida may have been affected. The department says it activated its cybersecurity response protocols, notified the Florida Attorney General's office, and is working with the Florida Digital Service and the Florida Department of Law Enforcement. It says current financial aid, tuition payments, and eligibility for scholarships, grants and loans are not affected. The cause has not been published. This site's take: a Social Security number does not change, so check your credit reports, consider a fraud alert or credit freeze, and treat any message that uses your name, email or phone number and mentions this incident as suspect.

2026-10-30

Frontline Education data breach (school software vendor): SSNs, Medicaid IDs and student IDs impacted — what staff and parents should do

Frontline Education, a US provider of administration software for K-12 school districts, posted a Notice of Data Breach dated October 26, 2026. It says its security team found a vulnerability in a third-party software product it uses on August 14, 2026, that the vulnerability allowed unauthorized access to part of its environment starting that day, and that the last day of unauthorized activity was August 15. The affected data relates to two products, Frontline Central and School Health Management. The company says the following data elements were impacted, with which apply varying by person: a Social Security number, date of birth, driver's license number, passport number, other government ID, Medicaid ID and student ID. Frontline says it is not aware of any misuse of the data, and offers adults in the U.S. two years of TransUnion credit monitoring and minors cyber monitoring (its incident page says dark-web monitoring where available). The company has not published the number of districts or people affected. Our view: if you work at or have a child in a US school district that uses Frontline, assume your notice applies to you, place a free credit freeze, and treat any call or email that quotes your Medicaid or student ID as unproven.