The organization that revealed the existence of the credentials concluded that whoever posted them was hoping to inspire a new wave of intrusions that might surface information about how the targeted institutions responded to the coronavirus pandemic.