It’s important for the purpose of evidence.

There’s no harm of dox towards the user you logged in as because that is publicly available and as long as you’re not sharing anything like their email, what is the harm? Just showing a screenshot of the page where it shows their username on your session is suffice. Blur anything private, if needed.

But there’s nothing anyone can do with the information you’re giving here. There’s too much data to parse through to determine what was the invalid login.