Illuminate Education, an educational technology company, experienced a data breach in December 2021. This incident involved the theft and deletion of student data from cloud-based databases through the use of former employee credentials. Notifications for some affected districts were delayed by almost two years.
The breach affected more than 10 million students nationwide. Confirmed data types exposed include student names, email addresses, mailing addresses, dates of birth, race, academic records, coded medical conditions, special education services, and reasonable accommodations. No SSN or financial data was reported as compromised. While a nationwide impact is clear, specific state-by-state breakdowns beyond California remain limited in available data.
More details regarding this breach, including additional affected parties or data types, may emerge as investigations continue and further disclosures are made.