> What else was in this database? Typically the password field is stored alongside the rest of the user record.

That is where you are supposed to have encrypted as many data fields of the record as possible - in addition to the conventional database encryption which encrypts the database as a whole.