they're saying they were hashed. i don't know if they're hashed on the console but i would assume the hashing function should be available to the (hardware) hackers if they are.

it's moot, though, for everyone who doesn't use the same password for PSN and their linked e-mail address if they're forcing everyone to change their passwords when it comes back up.