{ "type": "bundle", "id": "bundle--9b069d7e-f746-5dbf-8b4d-77279891aa16", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--afbc7c53-3d01-5149-808a-89d8b982864b", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "org:f4448035-cb77-49b0-8e2f-0cf49ce4354c", "name": "Illuminate Education, Inc.", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--2fb611ec-c237-5edf-8531-1ec012e5a4d3", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "brh:e4e1ff8c-259b-4c0f-9b5b-de295cd6f37f", "name": "Illuminate Education student-data breach" }, { "type": "incident", "spec_version": "2.1", "id": "incident--d7b4d489-21a8-564c-8fa0-26afc0fc8ecb", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "inc:882eec05-ca9f-411c-afd0-f3899d47cb9b", "name": "December 2021–January 2022 Illuminate Education compromise" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22ff122b-e86e-5c6e-80ac-0adcafa89e9f", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:ba71c2b9-3d4f-4cb4-a642-44f24b439d49", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--40ba6c78-b66b-5dcd-8ee9-5f2789f80585", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:477c65b1-2f0d-4b06-87a4-f9a021aef7ca", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2df2e166-842a-5626-8bee-2c3ea7ee7ba3", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:1892425b-0d9a-4946-8577-40a0c15ed546", "relationship_type": "resulted-in", "source_ref": "incident--d7b4d489-21a8-564c-8fa0-26afc0fc8ecb", "target_ref": "x-ally-legal-proceeding--c98040b1-755a-5308-80af-5794e7ae2656", "confidence": 100, "external_references": [ { "source_name": "New York State Office of the Attorney General", "url": "https://ag.ny.gov/sites/default/files/settlements-agreements/illuminate-education-inc-assurance-of-discontinuance-2025.pdf", "external_id": "cit:016676f9-25df-44ab-8779-6c13d2ca7372", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:60cb3bf582b9ffdc8d171ab871e611e982a96df0732da5d5b3a8ce26509d9606" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43e460ab-49de-599f-8e3a-7e3fa2dfa8cd", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:f8496c50-27a2-4c76-8ad2-685886ba91c1", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:c8008850-2883-4ea4-acf8-cf997453b71b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5285c7d5-44d2-5b29-8036-f2818f31f62e", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:f694033b-7bd1-426c-a4ea-ed12b08eaaec", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--5329d6cf-09ca-5dfc-8375-07e683f85188", "confidence": 100, "external_references": [ { "source_name": "California Department of Justice", "url": "https://oag.ca.gov/node/613897", "external_id": "cit:1ac2859f-b24a-45ea-9e9f-12e3eff72cc5", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1eddeee50bda6b599b3ff2abe21a3c755ad002314debb5d77170a26d71930053" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7de91851-75c4-5fc7-869e-c6ac3b3111b5", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:908f1533-d4b0-4d4e-8862-fe2ed064737e", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--145a20ea-fecc-5f7d-8452-8f571359a568", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:0eb43012-9a0d-4ba0-a5d2-12af90c3323b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--87e11c51-d182-5fec-8b82-903548606098", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:3203fc14-e179-409b-a2e4-28c60c0d30f0", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--093aeb42-8d5e-50fa-8985-62be3906b906", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:b2a00919-8b36-4283-902c-fb3cb95deae3", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9591652e-e51d-5473-859c-53c5e2c5d68d", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:91da2a10-c241-4a86-8577-ceb3ce3c7cd7", "relationship_type": "resulted-in", "source_ref": "incident--d7b4d489-21a8-564c-8fa0-26afc0fc8ecb", "target_ref": "x-ally-legal-proceeding--f3ba70a6-9726-5e29-85b3-ab55e8f93b28", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:8a70fffa-d19d-48df-b739-8b317fd16fb3", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1e6951d-d477-5c31-8c8d-22ae91915c2b", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:2ead34ec-6a2a-4482-a600-301c43b299f1", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:46f16311-08bf-4249-9bb5-93c1f2732d5a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b41ba2f1-3079-5695-8879-71fc09999bd5", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:cfa92d27-a580-4b90-9502-0a780ca8a9f3", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:d6c0d031-f9ea-4921-a687-ed87894b1290", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9e0ce3f-908a-5393-84e3-0ebdfa864e58", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:69564a2c-4b8b-4398-9e43-355b38263aed", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--7a11e0d7-8a56-5035-8ece-5d612f9a0715", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:863c8ac0-fbd5-46b6-8448-3f3f4dcd7e28", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3727a7b-61f5-5176-8909-b556aa3d5b7c", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:3d458e9b-01c0-496d-b286-6395f18aa49d", "relationship_type": "resulted-in", "source_ref": "incident--d7b4d489-21a8-564c-8fa0-26afc0fc8ecb", "target_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:f3df67a9-bc4d-450a-bc75-988440836ef4", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ebdc45c9-8fff-54a8-87cb-b465c57fb3d3", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:bc957cd8-9b76-490e-865f-e1885b4f3254", "relationship_type": "affected-organization", "source_ref": "incident--d7b4d489-21a8-564c-8fa0-26afc0fc8ecb", "target_ref": "identity--afbc7c53-3d01-5149-808a-89d8b982864b", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:22763288-e557-4566-93c9-fca6c4e2c769", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed94a0b9-f147-5ed6-89ba-aa87c4d3d51c", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:d5e3228a-bf99-4391-b0df-ed7dcb469360", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:d6822356-c334-4585-b6f3-bbe1dd72c99b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--0b44cda4-8836-588b-85a5-8be3b469b7ac", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:f931ade4-5c0e-4bb8-b5c6-93aca7a34440", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:25e2d5e7-405b-4572-acdf-c7dd02a87114", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" }, { "source_name": "New York State Office of the Attorney General", "url": "https://ag.ny.gov/sites/default/files/settlements-agreements/illuminate-education-inc-assurance-of-discontinuance-2025.pdf", "external_id": "cit:863b00d1-71f9-4bed-9038-4c924de8bc1c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:60cb3bf582b9ffdc8d171ab871e611e982a96df0732da5d5b3a8ce26509d9606" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2021-12-28" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--1100a5c3-5f37-57dd-82db-fbc64811ec42", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:ae8aeb3a-f2b1-4e24-a548-a22170f06a8e", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:315c43c0-392f-4ed0-8675-b7e8926bc678", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Illuminate's Orange Unified supplemental notice states that the data for that notice population did not contain Social Security numbers, credit-card numbers, or bank-account numbers; this negative statement is not generalized to every affected population." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--342e65ca-345a-523c-81d6-dd9f1aa9b40b", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:23fd23dc-c6de-46e7-95ab-36db84dc655d", "confidence": 100, "external_references": [ { "source_name": "New York State Office of the Attorney General", "url": "https://ag.ny.gov/sites/default/files/settlements-agreements/illuminate-education-inc-assurance-of-discontinuance-2025.pdf", "external_id": "cit:e61eb6d9-f1ed-41d1-bcc0-bf6709934aee", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:60cb3bf582b9ffdc8d171ab871e611e982a96df0732da5d5b3a8ce26509d9606" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2022-03-25" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--35f03c84-1680-5a90-8574-d43cd2901b74", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:80a51698-e386-45a4-86ab-be3c83a937f6", "confidence": 100, "external_references": [ { "source_name": "California Department of Justice", "url": "https://oag.ca.gov/node/613897", "external_id": "cit:6c5afefd-7392-4321-9ffd-4b7443515a84", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1eddeee50bda6b599b3ff2abe21a3c755ad002314debb5d77170a26d71930053" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2025-11-06" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--3d45c229-7cd4-5eda-8531-c153cba26a9d", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:e7eb3e04-b43a-46a8-a7b6-b80df7eacadc", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalorder.pdf", "external_id": "cit:df0d5af4-d535-4cdd-83cc-8ca511f58a54", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:70f9c97f1918628505b912da9de15260e8a9e4d09a3c83d1fa89b5544495112e" }, { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalorder.pdf", "external_id": "cit:58cb9248-7533-467f-97ad-0b42cbba4691", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:70f9c97f1918628505b912da9de15260e8a9e4d09a3c83d1fa89b5544495112e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The final FTC order prohibits specified privacy, security, and breach-notification misrepresentations; requires deletion and minimization of unnecessary covered information, a public retention schedule, a comprehensive security program, independent assessments, and reports to the FTC after certain government breach notifications." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--40eae0e2-02ff-506c-82af-929f070a0f60", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:42a9270d-7a9b-4bca-9d37-46ba08f5ffd6", "confidence": 100, "external_references": [ { "source_name": "New York State Office of the Attorney General", "url": "https://ag.ny.gov/sites/default/files/settlements-agreements/illuminate-education-inc-assurance-of-discontinuance-2025.pdf", "external_id": "cit:8c5fe95e-5bca-4c1a-af55-347e21672895", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:60cb3bf582b9ffdc8d171ab871e611e982a96df0732da5d5b3a8ce26509d9606" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "NYAG and NYSED found that Illuminate failed to decommission inactive accounts, rotate credentials, limit privileges, encrypt student data at rest, monitor anomalous activity, timely remediate high-risk vulnerabilities, apply retention policies, and complete its initial incident analysis; Illuminate represented that it made post-breach improvements." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--5069ae0a-a6c9-5175-86cf-44e4230399ad", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:0a207687-5bbf-4e9d-8b94-83c78d8b92ee", "confidence": 100, "external_references": [ { "source_name": "California Department of Justice", "url": "https://oag.ca.gov/node/613897", "external_id": "cit:b09d8b98-6372-4302-81d1-f680ee41b53d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1eddeee50bda6b599b3ff2abe21a3c755ad002314debb5d77170a26d71930053" }, { "source_name": "New York State Office of the Attorney General", "url": "https://ag.ny.gov/sites/default/files/settlements-agreements/illuminate-education-inc-assurance-of-discontinuance-2025.pdf", "external_id": "cit:26bedfe1-7f4e-4498-bcce-077651fb34f8", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:60cb3bf582b9ffdc8d171ab871e611e982a96df0732da5d5b3a8ce26509d9606" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The three state settlements totaled $5.1 million, including $3.25 million to California and $1.7 million in New York penalties and costs, and imposed security, monitoring, retention, deletion, and incident-response obligations." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--78acab88-b2e2-5599-81b1-9dea541aeb3f", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:644fcfbe-8e77-4cc8-832f-63484e564fdd", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:d60b5256-26bc-492d-9c19-38ac2b3bc74e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 10100000, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--88580e26-5bf6-5830-80a4-4c7bf28b1cbc", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:4228d946-2743-4a25-ab8f-e93cf0855391", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:0ef76758-5f68-4b7d-bff1-cc2fa620423f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The attacker modified security groups, reset database passwords, deleted database resources, and caused several Illuminate websites to become unavailable before access was terminated." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--98104efc-bbdb-55e4-8ab6-b07a12272330", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:4eab2192-c8e9-4d85-915e-385a2354d2bd", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:a46891c0-803b-4655-97b6-e2439e19c982", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The FTC complaint alleges the attacker used the compromised administrator access to generate a token and create a new administrator-level user that could bypass the required multifactor-authentication flow." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--b74fd151-9459-557b-8d53-07d099924ae6", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:34a7288f-5bb5-4de7-ac7d-9a84ba58bb9b", "confidence": 100, "external_references": [ { "source_name": "New York State Office of the Attorney General", "url": "https://ag.ny.gov/sites/default/files/settlements-agreements/illuminate-education-inc-assurance-of-discontinuance-2025.pdf", "external_id": "cit:451c88b7-4344-4190-a266-2c5a29f5cf88", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:60cb3bf582b9ffdc8d171ab871e611e982a96df0732da5d5b3a8ce26509d9606" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Attackers tried five sets of stolen AWS access keys and gained privileged access with a still-active IAM administrator key associated with a former employee who had left years earlier." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--b89523ff-b4bb-50b5-8fbe-58cd6cfcda1c", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:8deaca2d-5a7a-4f55-aa89-1a2b06d4187c", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:1fde590d-c14a-4268-b845-2d56d8b5c41d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The FTC complaint alleges initial notifications occurred from March through July 2022, while subsequent notifications to some districts, students, and parents occurred as late as October 2023." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--bda08113-8a79-539e-819c-03f2363471b1", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:c1939e05-c022-4339-8cd6-3e3c7691b72b", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:2ba7a353-6805-4cf1-8930-c364980486d3", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2021-12-27" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--c6e5e916-fb0b-565e-827e-a30ff661cb93", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:274bcb3e-751e-41e8-baf1-4ca0aeb70ec5", "confidence": 100, "external_references": [ { "source_name": "California Department of Justice", "url": "https://oag.ca.gov/node/613897", "external_id": "cit:a136d4da-2e4e-409f-8ebe-4b81d13bc5d8", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1eddeee50bda6b599b3ff2abe21a3c755ad002314debb5d77170a26d71930053" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 434000, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--cab0cfdc-f377-54fb-8101-9dfdd654a7ca", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:50c5c806-ee0d-4d1f-b351-341f489ccc44", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:23411a51-a114-4fb6-8ee8-a86136deb71a", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2022-01-08" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--d57230e7-5b6b-5123-8ea3-728fc367f189", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:5196467f-6bd1-4448-963b-6a1b42848ccc", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:cf698063-c0a5-4751-bdea-b0b45c64c432", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The FTC complaint alleges the attacker exfiltrated 787 SQL Server backups from Illuminate's AWS environment." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--deaf2f44-3339-53ae-8f61-7bd5057a53f7", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:07fa3601-d0c1-4b24-b5c4-56d641822cf5", "confidence": 100, "external_references": [ { "source_name": "New York State Office of the Attorney General", "url": "https://ag.ny.gov/sites/default/files/settlements-agreements/illuminate-education-inc-assurance-of-discontinuance-2025.pdf", "external_id": "cit:aba891fd-c1df-4b25-8fcd-83c7be250797", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:60cb3bf582b9ffdc8d171ab871e611e982a96df0732da5d5b3a8ce26509d9606" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 1700000, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--e859cd7d-6602-5463-8c3a-ec4a262ea272", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:af51b300-e386-4146-a5d6-feaffa49625c", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalorder.pdf", "external_id": "cit:3cbf7310-f2d8-4dfc-b4a6-d6b166512186", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:70f9c97f1918628505b912da9de15260e8a9e4d09a3c83d1fa89b5544495112e" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-06-05" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--eccd4613-d8ca-5c33-86dc-ae018c58e554", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:12e09d30-3365-4a67-a505-aee2e86ab8b7", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:b711e108-5a57-43f3-8281-2d5b2adefd9c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 387000, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--eef77ea8-2e8e-540c-8f87-ebeafb600511", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:eea8eabe-f0ea-48ec-aa51-979275b4fd30", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:78445594-9ccd-413f-ab48-cdeaf6c44ad6", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Illuminate offered one year of Kroll credit monitoring to eligible adults in the Orange Unified supplemental-notice population; offers and eligibility may have differed across populations." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f04e0a64-e6ff-58ee-836b-d5c78bd6d0c1", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:393f7178-38eb-4b66-b7a0-36bf288940c7", "confidence": 100, "external_references": [ { "source_name": "Federal Trade Commission", "url": "https://search.ftc.gov/system/files/ftc_gov/pdf/2223105c4833illuminatefinalcomplaint.pdf", "external_id": "cit:d36bf5bb-00d0-4bc2-b431-a4cd353e9f8f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:c9afd9d76e329b5ed5950bf323ec6a43363397c18f860edf8ec7ca4916295641" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The FTC complaint alleges the attacker demanded a ransom, Illuminate paid an undisclosed amount, not all stolen data was returned, and Illuminate could not verify deletion or whether copies were retained or shared." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f32238b8-49ee-582c-8954-25d48b047f80", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:563d8689-7f85-4101-a9f5-9443222cdd4d", "confidence": 100, "external_references": [ { "source_name": "California Department of Justice", "url": "https://oag.ca.gov/node/613897", "external_id": "cit:1f19be89-0e30-47c6-b8bf-e7e3c6ec4edc", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:1eddeee50bda6b599b3ff2abe21a3c755ad002314debb5d77170a26d71930053" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 3000000, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f612cec3-92e0-53a0-8bc2-98d0d2ef2229", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "clm:ad3fc7f3-884c-4163-a187-759533770d0a", "confidence": 100, "external_references": [ { "source_name": "Illuminate Education, Inc.", "url": "https://oag.ca.gov/system/files/Illuminate%20Education%20-%20Notice%20of%20Data%20Event%20-%20CA%20%28Orange%20Unified%29_0.pdf", "external_id": "cit:f2949fc2-b303-4d80-a611-e98199aa5528", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:4059883117857a66b71061dfc43d84cd801a799ed96802a87b24495b64b57bf0" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2022-01-08" } }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93", "created": "2026-08-09T01:12:00Z", "modified": "2026-08-09T01:12:00Z", "x_ally_original_id": "dat:7290ba39-bdce-4ff7-8087-56e370cd91c5", "name": "Account credentials" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--093aeb42-8d5e-50fa-8985-62be3906b906", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "dat:0fde3b95-2268-47f0-973b-387ce3d98e00", "name": "Education records" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--145a20ea-fecc-5f7d-8452-8f571359a568", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "dat:ba481af6-f599-410d-9cac-a181cb7ba4a9", "name": "Disability and special-education information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--40ba6c78-b66b-5dcd-8ee9-5f2789f80585", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "dat:41d26529-cba1-47c1-b528-25e4c18aedb2", "name": "Demographic information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--5329d6cf-09ca-5dfc-8375-07e683f85188", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:ff8b42ee-4a74-4d4d-a23f-1199c68c907f", "name": "Clinical information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--7a11e0d7-8a56-5035-8ece-5d612f9a0715", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "dat:c957c17d-7786-41c2-9026-11c7153f54d2", "name": "Student identifiers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0", "name": "Names" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9", "name": "Contact information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68", "name": "Dates of birth" }, { "type": "x-ally-data-exposure", "spec_version": "2.1", "id": "x-ally-data-exposure--fb4afa6b-3432-5c0e-86b5-50b17d0b9c0d", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "exp:7c42d673-3f92-4522-b4a7-b0ed0e02b685", "name": "Illuminate Education student-data exposure" }, { "type": "x-ally-jurisdiction", "spec_version": "2.1", "id": "x-ally-jurisdiction--4ccb84db-38a4-5f69-89e5-c22942931cf6", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "jur:3fea2c7b-32b3-4bef-a319-548b57c65988", "name": "New York" }, { "type": "x-ally-jurisdiction", "spec_version": "2.1", "id": "x-ally-jurisdiction--afc02450-0f03-5a4a-882b-a19d48ae7fb7", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "jur:619b1b78-fc2e-4f2f-8b10-2a1e416b167c", "name": "California" }, { "type": "x-ally-legal-proceeding", "spec_version": "2.1", "id": "x-ally-legal-proceeding--c98040b1-755a-5308-80af-5794e7ae2656", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "lgl:00e116f6-87cc-461e-a1e9-81b860323192", "name": "New York, California, and Connecticut Illuminate settlement actions" }, { "type": "x-ally-legal-proceeding", "spec_version": "2.1", "id": "x-ally-legal-proceeding--f3ba70a6-9726-5e29-85b3-ab55e8f93b28", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "lgl:ed80e133-888c-4d7c-badb-4763352809ae", "name": "FTC Illuminate Education matter 222-3105" }, { "type": "x-ally-notification", "spec_version": "2.1", "id": "x-ally-notification--beb01ef1-c7f9-5f94-8b49-028ca59ec9ee", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "ntf:26938845-8bc5-4a99-82cd-ca467c699bd2", "name": "Illuminate school, district, and student notifications" } ] }