The Federal Trade Commission (FTC) finalized an order with Chegg citing careless data security practices that exposed student and staff information.