Not sure if I'm missing something, but the article doesn't seem to match the headline?

The only login-relevant information I can find is from a sql connection request which has 1 username and password hardcoded into the command (presumably a employee login to access an internal database). Nowhere in the article do I see anything about user emails and passwords.