In addition to students’ medical information, the breach compromised current and former employees’ bank accounts, Social Security numbers and more, the district says.