Password.xls on Hong Kong College Website?

Hello all!

Just for fun, I used Google Dorks to just find some websites with a password.xls file publicly available, and when I searched filetype:xls inurl:password.xls, the first result was the website of a university in Hong Kong. I downloaded the file from a virtual machine, and opened it, and it actually has a list of names, and what seems like usernames and passwords. I don't want to do anything malicious with it, but is this illegal? Should I just scrap the VM?

Thanks