Ask HN: Trade School's Online Portal Hacked – Legal Recourse?

My girlfriend attends a trade school for veterinary technicians in the US.

She just called to tell me that their online portal has been compromised. Nobody can log in, and this system is linked to all other systems including financial and personal information.

Are there any statues that allow for legal recourse in this situation? One would hope there are stringent regulations in place for schools, much like medical data.