Flu jab email mishap exposes hundreds of students' personal data