State higher ed bosses lagged reporting massive data breach