Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.