they leaked full connection strings for customer databases with users and passwords.