More than 1 million students at New York University had their personal information exposed by a hacker who took over the school’s website over the weekend.