The people whose literal jobs it is to provide a service and protect the data, lost it. This seems to have been glossed over in the comments - I guess, none of you want the responsibility of doing your job properly, and don't deserve to keep it.

Blaming the victims is not on. Assuming the victims should have done a better job than paid and trained professionals is not on. Assuming the victims are all CS majors is not on.

"Users should know better!" you scream, into a world where currently almost everything stored locally is already safely shuffled to the cloud to be retained even if your desktop dies (Windows 10 OneDrive, and Apple iCloud, and other solutions like Dropbox, Box). Except, obviously, at this university.