The Federal Trade Commission has given final approval to its order against Illuminate Education, closing out a closely watched enforcement action arising from a data breach that exposed information tied to roughly 10.1 million students. For education companies and the schools that rely on them, the case is a sharp reminder that student-data security is now firmly in regulators’ crosshairs.

According to the FTC, Illuminate failed to reasonably secure sensitive student information, resulting in a breach with sweeping impact.