This is like giving someone a book you wrote to proofread, with your password unintentionally in the text. They use it to login and then tell you about it. Sure, they shouldn't have logged in, but it doesn't feel like it deserves criminal charges.
And it's not a criminal charge, the penalty is paying 3000 Euro and the costs of the lawsuit.