Seriously email your IT and/or privacy team at the university level. I work at a university and that would be removed ASAP for sharing PII. If you’re in the US or UK it’s a major violation of your privacy. Unfortunately most IT offices aren’t involved in many of the decisions and many of the people making those decisions are complete ignorant to the situation.