Supply chain β›“ Supply Chain

K12 Schools in NY Third-Party Breach (May 2022)

πŸ“… 2022-05-01 🏒 Illuminate Education
Primary Source β†—

Incident Details

Illuminate Education Mega-Breach Affects K-12 Students. New York state officials are investigating a data breach at Illuminate Education, maker of a widely used software platform for K-12 schools. More than 1 million. Data Breach Notification , Incident & Breach Response , Security Operations. New York state officials have launched an investigation into a data breach involving a widely used digital education software platform that exposed protected, personal information for more than 1 million school-age children. Third-party company: Illuminate Education.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Illuminate Education
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2022-05-01 Breach occurred
  2. 2022-05-01 Publicly disclosed