Killeen ISD confirmed on October 5 that employee information maintained by Frontline Education was involved in a data breach caused by a vulnerability in third-party software used by Frontline. Frontline is a company the district uses for certain human resources functions.
KISD’s systems were not hacked or compromised. On August 14, Frontline identified a security vulnerability in third-party software it uses that allowed unauthorized access to part of its system. Frontline reports that it fixed the vulnerability, brought in an independent cybersecurity firm and notified law enforcement.
Frontline has informed KISD that personal information connected to approximately 45,000 current and former KISD employees and others may have been exposed. This information may include Social Security numbers, home addresses, dates of birth, and email addresses. Frontline has advised KISD that no student information was involved in this incident.
Killeen ISD understands the concern this incident may cause, particularly because it involves sensitive personal information. The district continues to seek answers from Frontline regarding the scope of the incident and the steps being taken to support affected individuals.
Frontline has also told KISD that it is not aware of any misuse of the information as a result of this incident.
Beginning October 26, Frontline plans to notify affected individuals directly by email and U.S. mail. Those impacted will receive information about complimentary monitoring services, including two years of credit monitoring and identity theft protection for affected adults. Frontline has established a dedicated hotline at 833-516-8792, available Monday through Friday, 7 a.m. to 7 p.m. Central Time, for questions regarding this incident.
Killeen ISD has contacted impacted current employees directly by email to inform them that their personal information was identified as potentially affected and to explain what they can expect from Frontline's notification process. The district is also encouraging employees to monitor their financial accounts, remain alert for suspicious communications and review guidance from the Federal Trade Commission at www.identitytheft.gov/databreach.
Killeen ISD will continue communicating with Frontline and share relevant updates as additional information is confirmed.