More than 3 million records of student-athletes and college coaches’ were exposed in an unencrypted, non-password-protected database.