Their wording is really vague on this which concerns me. Cryptographically scrambled means what exactly? Hashed and salted? Encrypted? ROT13? What? It's kind of important. I don't need someone to parrot industry standards to me either, the company just got breached so my faith in them following any industry standards is pretty much nil.