According to reports, school vendor ‘Total Registration’ experienced a significant student data breach. Many unanswered questions remain about the company’s practices and the sufficiency of its incident response.