The data exposed via public .env files included production server database credentials, including the DB server addresses, ports, usernames, passwords, and API keys.