Plaintext isn't any kind of data protection I ever heard of

from here

Hundreds of millions of passport numbers breached, and it turns out they were not encrypted. At some point we really have to start considering these monumental lapses a form of negligence that businesses and other organizations can be held accountable for.