Students who received the personal data were asked to delete it and empty the trash can folder in their email client.