@PhenomX6 @opal SHA1 with static salt, more specifically (in the 2016 incident). Whereas they reused the same salt value for every password hash of every user, kind of killing the point of salting a hash to begin with.