Breachesby GlyphIlluminate Education
Disclosed Dec 1, 202510,100,000 affectedSettled
Hacker used ex-employee's credentials to access data of 10.1M students; FTC order
In late December 2021 a hacker used the credentials of an employee who had left Illuminate three and a half years earlier to breach its cloud databases, reaching emails, addresses, birth dates, student records and health data of 10.1 million students. The FTC's order requires a security program and deletion of unneeded data.
What is known
| People affected | 10,100,000 (as reported by the organization) |
|---|---|
| Disclosed | Dec 1, 2025 |
| Attack | Hacking |
| Data exposed | Children's dataEmailsAddressesDates of birthEducation recordsHealth |
| Sector | Education · US |
| Status | Settled |
| Lawsuit or fine | USD 5.1M NY/CA/CT AG settlements (Nov 2025); FTC consent order (finalized June 2026) (about $5.1M) |
Sources
Notices filed
Other breaches at Illuminate Education
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.