Though the headlines focus on the individual, this incident reveals a much broader concern: Are colleges doing enough to protect the personal information of their students?