These are often found in log files when people get a bit to log happy.
I've seen many smart developers accidentally log a request in an API that also happens to show the login credentials.
I've seen many smart developers accidentally log a request in an API that also happens to show the login credentials.
https://krebsonsecurity.com/2019/03/facebook-stored-hundreds...
https://www.theverge.com/2019/3/21/18275837/facebook-plain-t...
https://arstechnica.com/information-technology/2019/03/faceb...
https://www.wired.com/story/facebook-passwords-plaintext-cha...