The person you found probably thought that SHA256 is enough to obfuscate customer names and didn't know that rainbow tables exists.