By understanding who, where and how attackers are targeting universities and colleges, and taking a human-centric approach, officials can better safeguard their sensitive data.