Hackers have stolen the medical records, bank details and photographs of students at an Aussie school dating back to 2015, following a cyber attack.