3 ms·

They should've been salted and hashed !

• radq 14y ago
  The passwords were, apparently. “However, our investigation has thus far indicated that the attackers may have had access to limited user information – usernames, email addresses, session tokens and encrypted/salted versions of passwords – for approximately 250,000 users.”