Who hasn't received mail from a company notifying them that their personal information may have been compromised? No organization--not Amazon, not the CIA--is immune to cyberattacks, and higher education is no exception. Indeed, colleges and universities may be even more susceptible to security breaches than their corporate brethren, and the security threats they face are likely to get worse. Higher education institutions are vulnerable for a variety of reasons. For starters, campuses provide hackers with access to high-speed networks and lots of computers, making them an attractive target. Second, colleges and universities are perceived--correctly, in most cases--to be easier prey than corporations, because they tend to have a very different mindset when it comes to protecting data. It's not that they don't care about security; instead, the level of risk tolerance is higher on college campuses than it is among corporations, for one simple reason: Freedom of ideas and information is central to the mission of higher education. The third factor making schools susceptible to attack is the students themselves, who come to campus with brand-new laptops, smartphones, and tablets. Students don't always do smart things. They don't keep up with the software updates on their computers. They leave the computer turned on and logged into the network all day while they are at class. Such inattention gives hackers easy access to computers that haven't been upgraded to close vulnerabilities. Once they control the student computers, the hackers use these machines to break into the university network, which is the really valuable target. This article discusses how schools can mitigate the risks while still preserving their academic freedom. (Contains 1 online resource.)