letters from universities and colleges with use name and passw

Last month  My son received lots  letters  from universities and colleges with  use name and password
Someone are in top 20

keep it  or  not?

My son is 11 grade  and  took ACT in Sept and SAT I in OCT but he didn't  receive  dream  school   like   MIT or Stanford
my be  he send the test  scores already?
Who sold my son's  information  to universities  or colleges  ACT SAT(college board)  or high school?