If you’re trying to use Derby Network Server out-of-the-box with WebSphere Process Server or ESB, for example to create new deployment environments using patterns (as I was), you might be interested to know that the default username / password pair for Derby is derbyuser / derbyuser.

Obviously, it goes without saying that you should only use this information in an isolated test environment, or on a virtual test machine. Although Derby is not supported in production anyway, if you are at all concerned about security, you should spend some time configuring it correctly – which means not using default usernames and passwords.
Note: thanks to David Currie for the help with this tip.