AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
FTC Orders Illuminate Over Student Breach
Coverage from StateScoop, Federal Trade Commission, and others
The Federal Trade Commission finalized an order requiring K-12 software provider Illuminate Education to strengthen security controls after an alleged breach exposed personal information associated with more than 10.
1 million current and former students. The order restricts unnecessary data collection and retention, requires deletion and retention disclosures, prohibits misleading security or breach-notification claims, and imposes recurring independent assessments and reporting. The action highlights increasing regulatory scrutiny of how education technology vendors secure, retain, and communicate about sensitive student data.
The main update is that the FTC order now appears more operational and long-term, adding recurring independent assessments and incident reporting requirements on top of the existing security, retention, and disclosure limits. The story also sharpens the alleged breach timeline and the specific control failures the agency says contributed to it.