One would think that after at least two successful attacks, they would beef up security and start using crazy things like hashing and salting. If that happened to another company, they'd have a field day demanding more security.