If you read the article, it specifically says in the fourth paragraph: "However, he said he believes the university should reimburse him for his loss, since it was its system that was hacked.".

It wasn't his banking account being phished, you should read the linked articles before commenting on things.