Data breach exposes student requests for vaccine exemptions