Evidently the passwords weren't hashed with a unique salt or this analysis wouldn't have been possible. Edit later: Ugh, now that I read up on this some more I

Evidently the passwords weren't hashed with a unique salt or this analysis wouldn't have been possible. Edit later: Ugh, now that I read up on this some more I realize they weren't even hashed, but encrypted instead.