Ed tech company fined $5.1 million for poor data security practices leading to hack

Three state attorneys general announced Thursday that the educational technology company Illuminate Education will pay a $5.1 million fine and agree to make changes to its business to settle allegations that shoddy security practices led to a 2021 data breach.

The data breach exposed student names, races, coded medical conditions and whether they received special education accommodations. It impacted students in 49 states and three million in California alone.

Several security failings led to the breach, according to a press release from California Attorney General Rob Bonta.

Read more at The Record