Let's hope they at least hashed their passwords correctly.