I've seen this scenario unfold before:

  1. User provides username/password.
  2. An exception occurs somewhere.
  3. The stack trace from the exception is logged.
  4. The stack trace includes the credentials.
  5. The exception ends up in a ticketing system (Trac, JIRA, etc.)
  6. Nobody notices for years.