All of this took less than two minutes. Is it illegal to search for inurl:userpwd.txt ? No. Google is a public search engine. You are simply using a search operator.
[Database] host = localhost user = root pass = SuperSecret123 db_name = customer_orders [FTP] ftp_user = transferbot ftp_pass = filezill@2020 Inurl Userpwd.txt
Thus, inurl:userpwd.txt is a search query that asks Google: "Show me every publicly accessible file that has 'userpwd.txt' somewhere in its web address." All of this took less than two minutes
The lesson is simple: If you find one of your own files via inurl:userpwd.txt , consider it a breach in progress and act immediately. Inurl Userpwd.txt