While students change passwords and watch out for imposter scams, schools should start scrutinizing their third party ...