Evidently the passwords weren't hashed with a unique salt or this analysis wouldn't have been possible.

Edit later: Ugh, now that I read up on this some more I realize they weren't even hashed, but encrypted instead.