They might have outsourced their enrollment system like a lot of smaller colleges to the vendor (e.g. Empower, Jasmine) and not have had the information on serv

They might have outsourced their enrollment system like a lot of smaller colleges to the vendor (e.g. Empower, Jasmine) and not have had the information on servers that were compromised.