Soon we'll see services like, havemysecretsbeenpwned.com check it against with your secrets xD given the malw seeks local creds.

To my experience 80% of companies do not care about their secrets will/being exposed.

There is this shallow belief that production will never be hacked