Sega was responsible enough to not store passwords in plaintext. The email I received stated: We have identified that a subset of SEGA Pass members emails

Sega was responsible enough to not store passwords in plaintext. The email I received stated: We have identified that a subset of SEGA Pass members emails addresses, dates of birth and encrypted passwords were obtained. To stress, none of the passwords obtained were stored in plain text. Of course, they could still have been hashed inadequately, such as with plain md5.