Most people wont even realize if their account has been used by someone else, so what educational purpose does it have? The people that havent changed their router passwords sure as heck wont know what happened, so they wont "learn a lesson". Send them a mail, and tell them to contact their ISP if they dont know how to fix it, or if they dont trust the email.