School boards should be more transparent about the kind of information that was compromised, cybersecurity expert says