Are these servers (OKTA?) Storing unhashed passwords? Or did they tap the software or something? And why are people still reusing passwords between different systems? That is so 1990s. 

 I bothered to read the article. Now I understand they didn't rotate all their passwords after the hack. 

 yup. it's not a good look.