Disturbing but such hired guns are in use by all corporations to bury their breaches as well. Look at how United Health got away with the Change breach, which allegedly exposed the medical records of 100 million Americans last year
Agreed, I think the focus here is that typically schools are Public entities, they should be more transparent than the usual corporation.