It’s not that 64 million people had the password 123456, the admin panel had the password 123456, and using that they were able to access the data of 64 million applicants.