They are probably not saying "cleartext" because the data was still encrypted, just not hashed.