I received an email from my son's school about this. The email was downplaying that no personal information had been accessed, which I thought was probably not

I received an email from my son's school about this. The email was downplaying that no personal information had been accessed, which I thought was probably not going to be true at that point.