CPS accidentally shares students' personal information