They're probably not pros so didn't know to do something like dump the RAM, not just the disk, to a portable storage device. Just do strings on RAM and it'll probably have the passwords in plaintext. I suspect if someone took it they bricked the physical access compromise by grabbing it and left with a brick.