The news channel quoted an unnamed source who said that the school told him that his name, address and Social Security number were obtained by the university from information he provided when he took his college entrance exams eight years ago. The report didn't say why Sacred Heart would collect such data, but schools often gather such information for recruiting purposes.

Universities are easy pickings for data thieves, or so it seems to critics. Dozens of schools from across the country have suffered electronic intrusions during the past two years, and some security experts have questioned whether schools are committed enough to safeguarding sensitive data entrusted to them.

Avivah Litan, a security analyst with research firm Gartner said the nation's universities don't take the issue of security serious enough and "don't want to spend money" on taking necessary precautions.

Litan made the statements last week after learning that hackers had control of a computer server at Ohio University for more than a year. The university said earlier this month that two other servers were broken into and that about 200,000 Social Security numbers were exposed as well as some student health records.