An empty string hash does not equal the empty string (if you are on Oracle) and does certainly not equal null.

This will make it impossible for those users to login. Also, if you are luck it won't take the rest of the service down with them, making it impossible for the other users to login too.