Well, just saying, having password and token hashes public is basically a data breach and you may be in breach of a few laws for data protection stuff.