It’s the first public break in the case that might be the largest breach of American schoolchildren's data.