Data Breach Notification

Per SOPPA, a "breach" means the unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of covered information maintained by an operator or school. "Breach" does not include the good faith acquisition of personal information by an employee or agent of an operator or school for a legitimate purpose of the operator or school if the covered information is not used for a purpose prohibited by this Act or subject to further unauthorized disclosure.

Known Breaches:

  • PowerSchool Security Incident (2025)

  • Illuminate Security Incident (2022)

    • Illuminate Security Incident Summary:

      In early July of this year, parents of students who attended Riverside School District 96 during the 2018-2019 received a notification from Illuminate Education regarding a data breach they began investigating in early 2022.  Illuminate.

      During the 2018-2019 school year, District 96 had selected an online student data management system titled IO Insights.  During the initial stages of the implementation, the IO Insights parent company was purchased by Illuminate Education.  Shortly after the acquisition, Illuminate Education announced the discontinuation of the service and District 96 halted implementation. 

    • Illuminate Education failed to fully decommission and delete all data associated with the IO Insights product it had acquired and ceased operations.  

      The I/O Insights product was never operational in District 96, however, during the initial implementation setup District 96 began populating and syncing mostly basic student demographic data with the service provider. While the general form letter notification that parents received from Illuminate Education references "academic and behavior information, enrollment information, accommodation information, special education information and/or student demographic information", District 96's exposure was limited to mostly demographic data. Included in the data were also indicator flags associated with students with IEP's (individualized education program).  

    • Parents of students who attended Riverside School District 96 during the 2018-2019 and/or received a notification from Illuminate Education can feel free to email Privacy Officer to receive a secure copy of the information impacted due to the security incident.  

    • Illuminate Security Incident / Response Summary (4/29/22)

      Illuminate FAQ (Final)