> Fowler said he didn't know if the database was created legitimately and then accidentally exposed or intentionally used for malicious reasons.
Seriously? In what possible world can a collection of plain-text login credentials exist for any legitimate purpose?