Employee and student information was subject to “unauthorized acquisition” during the Nov. 25 network and systems disruption, ...