Even it's still encrypted, the hackers still could hack your account if you use weak password or the hacker have hints for your password.
If you don't believe me, you might want to check this thread :
https://bitcointalk.org/index.php?topic=1544686.0Yeah, they can just compare the hashes of the passwords to a known database and if the sha256 hash matches one in the database, the hackers knows the password as well.
You are quite safe if you use non dictionary, non common, non previously used passwords with such encryption in place, as it is almost impossible that it will appear in any rainbow table of any kind.
That's the way, using strong passwords and changing the password with or without any hack periodically...