This mostly applies to weak passwords! If the passwords behind the hashed values are weak, attackers can crack the password with tools like John the Ripper, etc.