Personal data covers a lot of sins. It could be anything from contact details, through attendance records and grades, school reports or simply example texts the pupils wrote or example tests, which still had the pupils names on them. Or non-anonymised test data for an application.
Without context, it sounds bad. But the context would let us know how bad it was. As it is, the news is incomplete and leaves us playing guessing games.