Higher education institutions are especially vulnerable to cyberattacks. When in doubt, assume there has been a breach.