Privacy GovernanceIlluminate Education FTC Consent Decree: What It Means for Your Vendor Contracts
As of June 5, 2026, the Federal Trade Commission has finalized a 10-year consent order against Illuminate Education, the K-12 software vendor whose 2021 data breach exposed the records of more than 10.1 million students — and the order's real target is not just Illuminate's own security, but the contractual gaps that let a breach like this go undetected and unreported for years.










