Nowhere in the article says 'hashed' passwords, so I presume plaintext (!!!) passwords were leaked. That's 100x worse than all the other data combined for two

Nowhere in the article says 'hashed' passwords, so I presume plaintext (!!!) passwords were leaked. That's 100x worse than all the other data combined for two reasons: it can be devastating for users, and it's easily preventable (by not storing them in plaintext in the first place). EDIT: Someone suggests stored passwords were hashed [1]. Hope they're right. [1] https://news.ycombinator.com/item?id=41278855 https://news.ycombinator.com/item?id=41278855