Just read
this article and found it a little amusing. Talk about amateur hour if they're not changing the default password on their equipment. They're just lucky the two kids were honest about it.
I'm not surprised it happened in Canada as I know both Toronto and Montreal are known for a high number of "skimmers", those devices crooks put on top of the card reader slot to capture your data.