Popular student monitoring software could have exposed thousands to hacks