So we can assume all passwords have been broken into?