Even some PIN codes were stolen, forcing the University to reset them.