Comment by nomilk

In many senses, internal staff having access to plaintext passwords is a breach.