Company agrees to report to FTC for 10 years for alleged student data lapses

A tech company that stores student information for schools has agreed to implement a data security program and report to the Federal Trade Commission (FTC) for 10 years, after security failures led to data for 10 million students being breached.

Illuminate Education collects and stores personal student data, including birth dates and health conditions, on behalf of schools. A vendor allegedly alerted Illuminate in January 2020 that its network had big security flaws, but the company failed to address them, according to the FTC complaint.