Disclosures:
Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.
Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.