Illuminate Education, Inc. Fined $5.1M for Student Data Breach, New…

New York Attorney General Letitia James, California AG Rob Bonta, and Connecticut AG William Tong announced a $5.1 million settlement with Illuminate Education, Inc., for failing to protect students’ data. The company’s software breach exposed personal information of millions, including 1.7 million New York students. Investigations revealed security lapses, prompting Illuminate to upgrade cybersecurity and privacy measures.

Illuminate, which provides educational tracking software to schools, faced scrutiny following a 2022 data breach. AG James emphasized the need for secure online platforms, noting Illuminate’s failure to implement basic security measures. Connecticut’s first Student Data Privacy Law action underlines the importance of safeguarding children’s information, with Attorney General Tong emphasizing accountability.

California AG Bonta highlighted the severity of Illuminate’s security deficiencies, underscoring the company’s obligations to protect student data. New York State Education Department Commissioner Rosa commended the attorneys general for their dedication to student privacy, noting the breach’s breach of trust and its impact on students and families.

The settlement requires Illuminate to significantly improve data security practices across the nation, ensuring better protection for millions of students’ sensitive information. The multistate coalition’s action is a wake-up call for education technology companies to prioritize cybersecurity in their operations.