Columbia admits last year’s data breach exposed victims beyond its students, staff.