The breach, which was discovered by a student, included private employee information and details from student financial aid applications.