Passwords stored in public Google Doc then showed up in search results

The article recounts two access-control failures: a developer saved staging credentials in a publicly shared Google Doc that became indexed by Google Search, exposing secrets, and an unrevoked ex-employee abused credentials to redirect a retailer’s QR codes—both incidents underscore poor credential hygiene, insufficient offboarding, and the need to prohibit storing secrets in collaborative documents.