For recent college students you might want to check out this story
https://www.darkreading.com/application-security/moveit-flaw-900-university-data-breaches
Yet another MOVEit fail - a company that helped almost 1K colleges and universities do enrollment and other services.

Link to the list of schools is here
https://oag.ca.gov/system/files/Exhibit%20A_6.pdf
None of the schools my kids went to are on the list but there are a LOT of big names. A handful in Colorado (but not CSU or Mines).