This is true! I also have a good story about how certain network cameras were left unprotected on the school network and some individuals took advantage of that by guessing the default password.