How about this, but also send them usb sticks with loads of data available on them that they thought was "private" including surveillance footage taken from flock cameras etc. That might be good motivation to be more aware. Not sure about the legality of this though lol