Tech start-up platform issued formal apologies after a database configuration error exposed student personal files.