Cyberthieves stole money from 21 college savings accounts — an incident State Treasurer Denise Nappier has called "unsettling."