"The affected database contained records for all faculty, staff and students who were employed by the university between 1970 and Nov. 13, and all students who attended the university between 1991 and 2016."

I bristle a little at "handled this well". All they've done so far is disclose the basics. Great. But the breach covers just about every employee (student employees included) for the past 46 years plus all students since 1991. I'll defer judgement on how well they handle it. Mean time, credit monitoring; oh joy.