This is actual problem in general. As a rule, I never give my personal information online anywhere, always use fake info. However, there are a couple of cases w

This is actual problem in general. As a rule, I never give my personal information online anywhere, always use fake info. However, there are a couple of cases when real info is necessary. If it's just my real name and phone number like for booking.com, that's maybe acceptable - just one weak point, little PII. However, an institution like an university requires a bit more, like a copy my ID or a photo. And based on their attitude, I'm sure they'll get hacked sooner or later. Their IT is either outsourced or understaffed and of mediocre quality. The fact than noone broke in (?) is because nobody cared that much.