Our runner-up at the college level is the University of North Carolina-Charlotte, where bank accounts and social security numbers for roughly 350,000 students, staff and faculty members were allegedly exposed, and some were exposed for nearly 15 years, due to misconfigured security settings. The mistakes were discovered very early in the year, and a forensics team was called in to figure out exactly what had happened. School officials say they have no evidence that any of the information was actually accessed, despite the exposure.