Data breaches are prompting some universities to rethink their use of personal student information.