They clarify that the passwords were indeed hashed and salted. "Encrypted" is just there to help the non-technical audience understand their passwords aren't exactly leaked in plaintext.

No details on the hashing scheme used though, so we don't really know how easy it'll be for the attacker to brute force the password hashes.