I suppose it's the most basic possible level of defense-in-depth that Atlassian didn't reuse those credentials, or put other sensitive operational information (

I suppose it's the most basic possible level of defense-in-depth that Atlassian didn't reuse those credentials, or put other sensitive operational information (that could result in a deeper breach of customer data) into their Envoy data. So it technically matters which credentials were leaked. But definitely still not a good look.