37,000 JCPS employees affected by Frontline Education data breach

Personal data for over 37,000 current and former employees of Jefferson County Public Schools is at risk after a security incident at a third-party vendor.

The breach involved Frontline Education, the software platform JCPS uses to manage job applicants, track absences, and schedule substitute teachers. A district letter confirms that exposed records included Social Security numbers, email addresses, and home addresses. JCPS leaders state that their own internal computer network remained secure during the incident.

Frontline identified the security flaw in mid-August but did not inform JCPS until October 13, nearly two months later. The company engaged an outside cybersecurity firm to repair the issue and alerted federal authorities. Officials report no evidence of identity theft or data misuse to date. JCPS has also notified the Kentucky State Police and the Attorney General’s Office while it continues its internal review.

Notices were mailed and emailed to affected workers late last month. Each recipient received an offer for two years of free credit monitoring through TransUnion. Individuals can contact Frontline at 1-800-759-7279 for questions regarding the breach or enrollment in the monitoring service.