Sensitive data, including student records and patient information, was transferred to a remote server controlled by the attackers. The operation suggests an advanced level of sophistication, indicating the possible involvement of an APT group.