A major bug in Oracle's ERP software disproportionately affected American universities, and hackers have capitalized by stealing gobs of data.