Disclosures:
Unsalted passwords hashed with one iteration of unsuitable function.
Recommended change: Start using “slow” hashes, also re-hash existing passwords if needed, publish hashing info visibly, then let me know.