We had another case in Bergen (Norway) where some 13 year old kid wrote a script to search files on school HD for things like usernames, etc.

To his big surprise, he found his own. On a spreadsheet, with usernames and passwords of 35000 others, in clear text

Turns out students had credentials to such places.

He tipped the school, who in turn called the cops on him. Cops went to his home and confiscated his computer.