“Bug” caused passwords to be stored on internal server in readable text instead of being hashed
Google and CWI Institute have been able to create two PDFs that hash to the same SHA-1