I was in shock the moment I heard that the WineHQ database system got compromised. I do not think that an insecure HTTP access could have been the reason for the compromise but rather an attack on the admin credentials. Anyway, I am surprised to learn that the passwords were all encrypted.