Someone downloaded malware on their system. I have deleted the credentials but the attacker may have downloaded it.