Source: https://law.stackexchange.com/questions/9582/can-a-company-be-sued-for-storing-plain-text-passwords