A developer on my team accidentally published a repo under his personal account on BitBucket. It was public for 10 minutes. How worried should I be about the contents leaking?

I'm just wondering if there is any way for bots to detect new repos and scan/download them.

His personal account only contained one other repo, a personal tutorial project, so the odds of a human seeing the new repo would have been close to non-existent.

The impact is low even if the contents leaked, there were some email addresses and API keys but no secrets.