Frontline - Data Breach 

Question and Answer Information

Background Information – Frontline Education is a provider of K-12 school administration software. Astoria School District uses Frontline Absense Management, Time & Attendance, Recruit & Hire, Professional Growth, and Central.

On August 14, 2026, Frontlines security team identified a vulnerability in a third-party software product used that allowed unauthorized access to a portion of the environment beginning August 13, 2026. Frontline promptly investigated the issue with the assistance of an independent cybersecurity firm, remediated the vulnerability, engaged with law enforcement, and took steps to further reinforce the security of our systems. 

Question - How do I know if my personal information was specifically compromised? (When and how will I be notified if I am impacted?)

Answer - If your personal information was compromised you will receive communication directly from Frontline via email and/or physical mail.

Question - What specific personal information was accessed or stolen? (e.g., Social Security numbers, banking details, home addresses, phone numbers, performance records?)

Answer - According to information that we have received from Frontline, Social Security numbers, email address, physical address

Question - Are current staff members the only ones affected, or does this include former employees and applicants?

Answer - Frontline has stated that 496 of our staff have been affected. This may include ESS Subs and some former staff.

Question - Was student data impacted by this incident, or was it limited strictly to staff information?

Answer:  From what was shared with the District from Frontline only staff information was impacted.

Question - How and when will Frontline through TransUnion contact me to set up credit monitoring? (Will this come via email, physical mail, or a Frontline portal message?)

Answer - The information the District has received from Frontline has stated that staff impacted by this event will be notified sometime before the end of October.  If your personal information was breached Frontline will email you and/or send information to you via physical mail.  Notifications may come from frontline-transunion.

Question - What specific steps do I need to take to enroll in the TransUnion service, and is there a deadline to sign up?

Answer - No cost a 24-month membership to TransUnion’s credit monitoring. To activate your membership and start monitoring your personal information, please follow the steps below: (exact information will be in the communications from Frontline-Transunion)

Ensure that you enroll by: January 31, 2027 (Your code will not work after this date).

Visit the TransUnion website to enroll.

For Adults: www.mytrueidentity.com

Provide your activation code (see attachment A) (in letter sent to staff)

You must enroll by January 31, 2027 to receive these services.

 

Question - Will enrolling in this free service require me to enter a credit card or auto-renew after 24 months?

Answer - This was not communicated through Frontline, but this is unlikely.  The letter you receive will provide directions and information.

Question - What should I do if I suspect my identity has already been stolen or misused?

Answer - If you ever suspect that you are the victim of identity theft or fraud, you can contact your local police. Additional information about how to protect your identity will be sent to you by letter via email and/or via email.

Question - Is Frontline currently safe for staff to log into and use for daily operations (e.g., absence management, professional development, tracking hours)?

Answer - In Frontline’s communication to school districts they state they have taken steps to secure their systems.

Question - Do staff members need to change their passwords for Frontline or their district network credentials?

Answer - Based on information that has been provided by Frontline, No. Passwords were not accessed in this data breach.

Question - Was district infrastructure or the local ASD network breached, or was this strictly isolated to Frontline’s cloud servers?

Answer - This was an issue strictly on Frontline's cloud services. The ASD network was not an active part of the data breach.

Question - Who is the primary point of contact at ASD if I have specific questions or concerns about my data?

Answer - The best way to know more about questions or concerns about your data is to check on the District’s website.  The District has a dedicated area on our website to provide staff with information as we know it.  You will see a link on the front of our website that will take you directly to information about this Frontline issue.

Question - Is there a direct phone line or dedicated support email set up by Frontline for affected individuals?

Answer - The Company has established a dedicated call center to answer questions about the cybersecurity event as well as the TransUnion services that we are offering to you. If you have any questions, please call the TransUnion call center at 1-833-516-8792, from 8 a.m. to 8 p.m. ET Monday through Friday, excluding major U.S. holidays.

Question - How often will the district provide status updates as new details emerge?

Answer - As the District gains more information about this security breach we will update information on our website.