Illuminate Education

Illuminate Education, also known as IO Classroom, is an education technology company headquartered in the United States. The company provides a platform that schools use to store and manage student information. Its core services include tracking academic records, attendance, and special education status. The platform is designed for K‑12 institutions and is used by school districts to support classroom instruction and administrative functions. Illuminate Education has a notable presence in the New York City school district, where its IO Classroom product has been deployed.

In January 2022, a security incident exposed the personal data of over 800,000 students, including names, birthdates, academic records, and special education information. The breach was traced to a former employee’s credentials being used by an attacker to gain unauthorized access to the company’s systems. Investigations revealed that the company had left known vulnerabilities unaddressed, stored data without adequate encryption, and delayed notifying affected parties. Regulatory authorities alleged that Illuminate Education misrepresented its data protection practices and violated applicable privacy laws. As a result, the company was required to implement a comprehensive security program, establish data retention policies, delete unnecessary information, and improve its breach response procedures. The incident prompted affected entities to demand independent verification of the security upgrades and to review contractual compliance with data protection obligations.