What Should the Consequences be for the Different Levels of Action?

In year 9 there is a hacking problem where some students hacked into the teachers accounts. People who hacked: Minimum of 2 weeks suspension, discussion with parent(s) and possibly expulsion People who used the passwords of those who were hacked: Minimum of 2 weeks suspension, discussion with parent(s) and possibly expulsion People who used the hacking codes: Minimum of a week lunch time detention and in school suspension Lookouts: In school suspension Bystanders: Lunch time detention for at least a week