OSU officials say the data of 636 students, prospective students and family members was exposed to hackers engineering a phishing attack.