Here are four recent security incidents which were serious enough to require public notification. Thanks to Adam Dodge at Educational Security Incidents.
University of Florida web site contains former student social security numbers
Four Ohio State University breaches in 2010 expose personal information
Virus at Oklahoma State health services center exposes patient information
High Point University misuses student credit card information
BTW, Cymbel is an approved Massachusetts Higher Education Consortium vendor.