The Federal Trade Commission has given final approval to its order against Illuminate Education, closing out a closely watched enforcement action arising from a data breach that exposed information tied to roughly 10.1 million students. For education companies and the schools that rely on them, the case is a sharp reminder that student-data security is now firmly in regulators’ crosshairs.

According to the FTC, Illuminate failed to reasonably secure sensitive student information, resulting in a breach with sweeping impact.

The Federal Trade Commission has given final approval to its order against Illuminate Education, closing an administrative enforcement action that centered on allegations the ed-tech company failed to adequately safeguard highly sensitive student information. According to the FTC, those security failures contributed to a breach affecting 10.1 million students — a scale that makes this one of the most significant recent privacy matters involving school-related data.

The agency’s action, announced here, is notable not just because of the number of affected individuals, but because it underscores the FTC’s continued willingness to treat data-security lapses as consumer-protection violations in sectors handling especially sensitive populations.