I am glad the passwords are encrypted but why is the other data not encrypted? I consider my PII info Name, email and IP just as important. Breach are going to happen and nothing we can do about it but make the data useless is your responsible. Why is it necessary for you to record the IP address of the users? Did they get all users info and if not how can I find out if my info was breach?