Cracked by Anonymous India

[1]

So I typed in BSNL’s home page address in the evening on Friday, and was met with the routinely occasional “Oops!” message Chrome throws at me when I occasionally visit the BSNL home page, telling me that it couldn’t find the page I wished to visit.

So I tried through Google (maybe I was typing the wrong address?) but that failed and I noticed search results popping up informing me that Anonymous India had cracked the BSNL website and leaked the passwords of their databases (cracking is breaking computer security systems without consent).
So this is what happened in case you missed it.
Anonymous (a “hacktivist” group that takes responsibility for online protests, involving taking down Government websites, etc.) had cracked Union Minister Kapil Sibal’s official website a few days earlier in protest over his comments regarding the apparently misguided arrest of two women via Section 66A of the IT Act. This time, they extended the protest and defaced BSNL’s site, and cracked a file (or files) that had passwords and usernames required to login to BSNL’s regional databases.
They (@opindia_revenge) posted at least some of the information on Pastebin, and announced it via Twitter:
“BSNL Websites were hacked, and passwords and database were leaked on pastebin with Anonymous India’s demands of withdrawal of Sec 66A of IT Act.”
The site is back up today (Saturday), so I better visit it before someone throws it back offline. Oh, I kid BSNL! People don’t even need to try it, because they could just keep guessing the passwords for the databases!
Why? Because BSNL stores them in plain text. Seriously, I’m not joking. What Anonymous posted on Pastebin was disturbing not so much because they managed to do it (which is depressing in itself), but because it was not encrypted. Simple plaintext. So I know the databases are MySQL databases, that at least one of them doesn’t use SSH and only plain HTTP, and that most of the passwords are incredibly insecure, like “Password123,” “password,” “vpt123” and “meter.” Note that I have negligible experience with IT security or MySQL, yet I’ve understood all of this.
Although Anonymous claimed that they’ve cracked 250 databases, whatever information they’ve posted online contained about 10 or 15 databases from various states. I don’t know what these contained, as my inexperienced attempts to connect to the databases failed via standalone MySQL clients, and it’s possible that they had taken them offline (I hope that they did that).
Just as a note to Anonymous, if these databases contained sensitive private information of thousands of ordinary people, I can't be sure if it's a great idea to leak stuff like this, though at least it puts a spotlight on the lack of secure IT practices employed by the government.
And the government should hire me as the IT security adviser, because clearly the current ones aren't any better than underqualified little me.
So will this help the anti-Section 66A protest? I'm not sure, but I guess it's another brick in the wall.