That's a good question, and it seems to be something that's usually glossed over when we're talking about password security. I think it's anything from SQL inje

That's a good question, and it seems to be something that's usually glossed over when we're talking about password security. I think it's anything from SQL injection to breaching live database or backup servers. That's why hashing and salting are important, because patching holes in your infrastructure is a lot easier than dealing with the nightmare of all your users' passwords being known.