If these are inside a web-accessible folder with indexing turned , anyone can download them. Attackers use automated scanners to find these with search terms like the one you mentioned.
find /var/www/html -type f -name "*.txt" | xargs grep -l "password\|passwd\|login" i--- Index Of Password Txt BEST