SHA1 was never secure.

They even teach you how to break it in basic computer security classes, and have been teaching that for years.