This is completely unacceptable. 1) they were storing passwords and 2) they were keeping an old database with sensitive information around that should have been deleted if it were no longer being used. You haven&#x27;t seen indications that they altered professor ratings on your site? Who cares? What about the fact that email addresses and passwords are now in the hands of criminals? Companies really need to start being held responsible for the results of their lacklustre security efforts.