I know this is old news by now, but it illustrates the need for protecting your databases.
Hacker breaches UGA system stealing social security numbers. If your database tables containing social security numbers are encrypted, hackers will not be able to use the data even if they gain access to it, unless your entire database is compromised. Do you know which tables contain this information, do you know if it is protected, and are these tables exposed to the internet?