School nurses across the country are being told their Medicaid billing records were exposed after an intruder spent two days inside the network of the company that supplies their documentation software. Frontline Education began mailing notification letters October 26, roughly ten weeks after the intrusion, and the compromised data includes Medicaid identifiers, student IDs, birth dates, and Social Security numbers.
The Wayne, Pennsylvania vendor said its security team found a vulnerability in a third-party software component on August 14. Unauthorized access began that day and ended August 15. Frontline has not named the product or the flaw, and no ransomware group has claimed the operation.
Two platforms were involved. Frontline Central handles human resources and employee records. School Health Management is the more consequential one for patient privacy: school nurses use it to document care and process Medicaid billing for students. Greenville County Schools in South Carolina confirmed that School Health Management was the only affected system on its end, with Medicaid billing numbers, names, student IDs, and birthdates taken.
Frontline has not published a total. State filings put the count at 805,382 across Massachusetts, New Hampshire, Vermont, and Texas, with 778,372 of those in Texas alone. Killeen Independent School District said it was told roughly 45,000 current and former employees may be affected.
Adults in the U.S. are being offered two years of credit monitoring through TransUnion, with cyber monitoring for minors. Health systems that share student records with district nursing programs should confirm whether their data flowed through the platform and treat the Medicaid identifiers as compromised.
