[throwaway84352]

Some 10 years ago, when I was in 8th or 9th grade, I was threatend to be expelled as well, and charges were allegedly brought against me (I never really checked). I "hacked" the school website (as the CS teacher explained to my parents) and deleted all it's contents. In reality, I only logged in via FTP and renamed all HTML files (the hosting did not event support PHP, and this was around 2008). I had access to the FTP because a year ago I was briefly responsible for running the school website and nobody bothered to change the passwords when they took over running the website.

I got a call from the principal the next day. He congratulated me and asked me to apologize to the CS teacher. After I did that, she agreed to drop the charges. In the end, I was only reprimanded and I had to apologize to the whole school as well. My only other "punishment" was helping the CS teacher fix some computers after school.

As this was playing out, I was hoping they wouldn't find out what I did a year earlier - I'd set up a phishing website for the country's most popular email service and I'd set it as a homepage on all the school computers. Needless to say, noone bothered to check the address bar, so in a week, I had passwords of half the school, including some teachers and the principal himself.