Well, they could also have been using unsalted hashes, and they're afraid someone might use a rainbow table to find out the original password. Still bad, but no

Well, they could also have been using unsalted hashes, and they're afraid someone might use a rainbow table to find out the original password. Still bad, but not nearly as bad.