The Federal Trade Commission has given final approval to its order against Illuminate Education, closing an administrative enforcement action that centered on allegations the ed-tech company failed to adequately safeguard highly sensitive student information. According to the FTC, those security failures contributed to a breach affecting 10.1 million students — a scale that makes this one of the most significant recent privacy matters involving school-related data.

The agency’s action, announced here, is notable not just because of the number of affected individuals, but because it underscores the FTC’s continued willingness to treat data-security lapses as consumer-protection violations in sectors handling especially sensitive populations.