FTC In the Matter of Illuminate Education Inc.

Illuminate Education Inc. allegedly claimed to protect the privacy and security of student data but failed to deploy reasonable security measures to protect information stored in cloud-based databases. These alleged failures led to a major data breach, which allowed a hacker to access personal data of 10.1 million students. According to the FTC, Illuminate failed to address numerous security vulnerabilities after being alerted by a third-party vendor almost two years before the breach, and also failed to notify schools about the breach in a timely manner as promised.

Summary generated from official Federal Trade Commission press release