A 20-year-old Carleton University student, Mansour Moufid, has been charged under the Criminal Code with mischief to data and unauthorized use of a computer after a letter was sent to the university with a list of the students' accounts and their passwords. The letters author claimed he easily broke into student accounts using a keystroke logging program. According to the Ottawacitizen.com "The breach allowed access to the Campus Cards that students use as debit cards for campus purchases, including photocopiers, food kiosks and the bookstore." It seems the student was trying to make a point about the IT departments security procedures, looks like they didn't take kindly to his constructive criticism!
