California’s Supreme Court will consider the reach of two data privacy laws cited in a recent appellate case that found an education vendor potentially liable for a breach of student information.

The court on Wednesday granted review in J.M. v. Illuminate Education Inc., a class action lawsuit filed against the student-tracking software company that was the target of a cyberattack in December 2021 and January 2022. The breach may have exposed millions of students’ academic, attendance and assessment records nationwide, according to media reports of school districts and students notified by Illuminate.