The file was left entirely unprotected - no encryption, no password, no safeguards - just a plain text document holding millions of sensitive data entries.

If you tend to reuse passwords or haven’t changed one in years, you should assume your credentials are vulnerable and take steps to protect yourself.