Any other people getting hacked?

Rumor originally had it that the original list was accounts made from January 1, 2007 till the 2010 incident involving a hacker using an SQL injection to break into the Nexon database. Accounts made before that time period were stored in a separate database or possibly a separate server that did not get tapped into.

What I'm curious about was why Nexon originally made no attempt to encrypt not only the server's database, but also use encryption within the files to turn actual plaintext into cyphertext that could not just be read without an unpublished internally known proprietary algorithm of a high level bit rate like 256 bit or higher levels.