Education Company Illuminate Ordered to Fix Security Failures That Exposed Student Data

The Federal Trade Commission has finalized an order against Illuminate Education Inc. following charges that the company failed to properly secure student personal data. The order requires Illuminate to create a data security program, limit what information they collect from students, and delete unnecessary data. This action comes after the company's security failures led to a major data breach. If your child's school uses Illuminate Education software for grades, assessments, or student management, your child's personal information may have been at risk. Illuminate provides software to schools across the country. The security problems affected data the company collected and stored about students.

Here is what parents should do:

1. Contact your child's school and ask if they use Illuminate Education products. If yes, ask what student information was shared with the company and whether your child's data was affected by the breach.
2. Request that the school provide details about what data they share with third-party education technology companies.
3. Ask your school what steps they are taking to ensure vendors protect student information going forward.
4. Review your child's school records to ensure all information is accurate and watch for any signs that someone has accessed or misused the data. Schools increasingly rely on technology companies to manage student data, from grades to attendance records. Parents have the right to ask schools which companies have access to their children's information and how it is being protected. Make it a habit to ask these questions at the start of each school year and whenever the school introduces new apps or online platforms.