Something similar happened to a huge retailer here in Austria where just typing your username without password would log you in. Reason? An intern committed debug code to production and nobody noticed. In my book that's not the fault of the intern but the fault of the CTO/$TECH_LEAD that hasn't implemented and religiously uphold a code review process for everything that goes into production since stuff like this could happen even to experienced engineers that are tired or having a bad day.
Interns are not stupid and so they have to carry the burden of their mistakes too.
You can’t fault people for making simple mistakes or you’ll end up with an organization where nothing gets done.
update: added "professional" before "scientists"