Reply to post:

"Strangely, not all VMs shared the same authentication, but all were destroyed."

If the hypervisor was got at it wouldn't make any difference if the VMs had different authentication. The entire disk system holding the VMs could be wiped.