Names, student ID numbers, birthdates and Medicaid billing numbers were exposed in a breach at school nurse software vendor Frontline. Letters start going out Monday.

Current and former Greenville County Schools students had personal information exposed in a cybersecurity incident at Frontline Education, a software company the district uses for school nurse records. Frontline will start notifying affected families Monday, Oct. 26.

The district posted the notice on Wednesday. It said Frontline had told the district about the incident, which affected school districts across South Carolina and the nation.

What was exposed

The only district system involved is Frontline School Health Management, the district said. Nurses use it to document care, and the district uses it for Medicaid billing. The district’s own systems were not breached.

According to the information Frontline gave the district, the exposed data includes:

  • student names
  • student ID numbers
  • birthdates
  • Medicaid billing numbers

Not every record holds all four; the district’s notice says “and/or.” The district said it knows of no other sensitive information that was compromised. Frontline is not aware of any misuse of the data, the district said.

The district said it no longer collects Social Security numbers from students and does not use any part of one in student ID numbers. It called the breach “very low risk.”

How it happened

Frontline said on its incident page that it found a flaw in a third-party software product in August 2026. The flaw allowed unauthorized access to part of its systems holding data for two products: Frontline Central and School Health Management.

Frontline said it has fixed the flaw, had an independent cybersecurity firm check the fix and contacted law enforcement. It said all its products are running normally. Districts that never used either product were not affected.

What it means for you

  • Watch your mail and email from Monday, Oct. 26. Frontline will contact current and former students at the email or mailing address it has on file. Its notices come from frontline@notifications.cyberscout.com or no-reply@support.frontlineed.com.
  • Moved since your child left the district? Call the TransUnion call center at 1-833-516-8792 to check whether you were affected. It is open 8 a.m. to 8 p.m. ET, Monday through Friday, except major holidays.
  • Free monitoring. Adults who are notified get 24 months of credit monitoring and identity theft protection through TransUnion. Children get cyber monitoring instead. Frontline pays for both.
  • Enroll by Jan. 31, 2027. That is the deadline to sign up, according to the district.
  • Questions by email: Frontline takes them at frontline@transunion.com.

The district recommended taking up the free monitoring. It also pointed families to the Federal Trade Commission’s guide, what to do if your information was lost or stolen.

Key dates

When What
August 2026 Frontline finds the flaw in third-party software
Wednesday, Oct. 21 Greenville County Schools posts its notice
Monday, Oct. 26 Frontline begins notifying families
Sunday, Jan. 31, 2027 Last day to enroll in free monitoring

More on local schools: Greenville public schools and the district’s record graduation rate this year.