The Information Commissioner said the data breach, which included students' health problems, was serious.