The compromised information was sensitive, but wasn't financial. So what WAS it? It included usernames and hashed passwords. But what ELSE?