I am using a command similar to this example:

curl --ftp-ssl -u username:password -o /save/file ftp://mydomain.com/myfile

to transfer some files to an internal server. I am curious if the actual files being transferred are then encrypted as well or is it just the username:password?

The files contain sensitive information and the paths specified in the curl command are also sensitive.

Is it possible for anyone to use that information negatively?