Baltimore County Public Schools mistakenly exposed the personal information of 2,500 employees