A) Almost certainly not. No doubt phished/otherwise involuntarily obtained credentials end up in their database, and people that voluntarily contribute their cr

A) Almost certainly not. No doubt phished/otherwise involuntarily obtained credentials end up in their database, and people that voluntarily contribute their credentials when pressured will lie about their contribution to the authorities. But there's no evidence that sci-hub itself is behind any attacks. B) Yes, but only due to the potential sensitive nature of the credentials unrelated to the downloading of papers.