I do think that was an oversight. There's no reason not to encrypt that data," said Borohovski. "The problem is not that [people] need to be concerned about their Yahoo account -- its all the other accounts they use. I'm not entirely sure that the scale of this is going to be limited to Yahoo.