The password was pretty low entropy, I wonder if that makes it harder for tools like GitLeaks to find? But the email address, yes I guess