Hacker News Reader

I'm always left wondering when data is leaked or stolen, why the data wasn't encrypted at rest. Is it too hard or expensive to do so?

Possibly because it was a sysadmin that leaked it. It has to be decrypted at some point for people to see it.