They got pictures off his webcam somehow. That means it can be done.
Other than that, what Wurlitzer said.....
I would expect the school to have the records of the things you mentioned necessary to get into the computer. And in that case, it wouldn’t really be hacking.
Of course it can be done, but it is easier to get a picture off his web cam if he sent it to someone else and that someone forwarded it to the school then for the school to hack it off of his computer, unless the school set up his computer so that it could be done before they gave it to him. If that is the case then the school broke the law and they should be under criminal investigation.
“I would expect the school to have the records of the things you mentioned necessary to get into the computer. And in that case, it wouldnt really be hacking”
Yes it would. You cannot use personal information to break the law even if you have lawful access to that information.