We had a local kid that did something similar at a school here. He wrote a crawler which he then used to search files (in the school system) for names. He found

We had a local kid that did something similar at a school here. He wrote a crawler which he then used to search files (in the school system) for names. He found his own name in spreadsheets which contained names, usernames, and passwords - in plain text. For some reason, all students had access to the admin file systems - and for some other reason, the IT people had usernames and passwords stored like that. Either way, he reported the findings to the school admin. What did the school do? Press charges. Police came knocking on his door, and confiscated his computer.