you have to wonder why sensitive data was stored in a spreadsheet in the first place
Well I don't find it particularly surprising, whether it's correct or not is another matter, but collating and storing student's marks in a spreadsheet doesn't sound wildly improbable, and it's a bit of a stretch to consider that information "sensitive". As noted above, it used to be common for student grades to be posted on a noticeboard for all to see.