Use the password you found in the Notes app on Alex's phone (Exercise 01) to log into their computer and view the sealed case file. The Notes app didn't give you a username — but at SCCDU, most staff logins are simply their employee ID number. If you didn't note it down, it's worth going back to check what else was on Alex's desk.
Login successful. Alex's last note confirms the network intrusion was traced back to a phishing email that harvested a reused password. The account has since been secured with a longer, unique passphrase.
Lesson for the file: short passwords and reused passwords are two of the easiest ways attackers get in. Long, unique passphrases (like Bellingen#94 instead of something simple like password1) are far harder to guess or crack.