Dutch police have arrested a 40-year-old man on suspicion of hacking... after they accidentally sent him a link granting him access to their own confidential documents.

Who is the bigger plonker? The police for sharing a download link, or the guy who demanded a "reward" for the return of the files?

https://www.bitdefender.com/en-us/blog/hotforsecurity/dutch-police-arrest-man-hacking-accidentally-sending-confidential-files