Company failed to follow one of the most sacrosanct rules for password storage.