If what you are saying is true; did they store the passwords in plain text as well?