Student loan data breach leaks 2.5 million social security numbers