Students and digital security experts say York ... the university did not directly inform students about the situation, relying instead on statements posted to its website and social media.