Didn't read it, but, they didn't salt each password? Hard to imagine why didn't they do it.