I just started a new job last week and I'm asking for a sanity-check before I mention this to anyone. All the new employee accounts are created with the same default password (I know, already a no-no). Today while running SQL queries I noticed that all the recently-created accounts had the exact same hashed value in the database. From my limited understanding, this indicates that the passwords are not being salted when hashed, which would be a major security issue. Am I right?