There was a breach, you used your internal procedures to remedy the breach and no information was made public.
Needs to be logged internally and written up as to what was done to secure the data.
Member of staff concerned should get a letter on their file from the head given how difficult this could have been had the student been in school. I assume your network does not allow the students to log in from home or via their phones. Are you certain they didn't read it?