khsmide.se
Metalworks
They sent out my password in an e-mail after I registered. And later, requesting a new password, they sent out the new password directly to me again.
orriant.com
Corporate wellness programs
They didn’t seem to have a working password retrieval function on their website, so I contacted customer service via email. They said they didn’t have access to the password (good! I’m thinking), but would get it sent out to me by another department :/ I told them that was not up to industry standard and suggested they let their developers know, but they didn’t respond to that comment.
I then received my password via email in plain text.
formaremedicala.ro
Medical education
Pretty high risk considering that computer illiterate MDs possibly use the same password for their digital signature.
questradeaffiliates.com
Stock trading broker affiliate program
Their main site is pretty secure, but their affiliate program sends your username and password in a plain text email.
This would probably not give someone access to your main account, unless of course you use the same password for the affiliate program as you do for the brokerage.
psccu.org
Credit union
Serving one of the largest private utilities in the state. Lost password request, short n sweet.
waste.uk.com, wasteheadquarters.com
Band merchandise
From April 2012. I hope they have changed their practices since then… Too much optimism, right?
tigsource.com
Independent game developer community
The most popular and active, full of important and popular people.. and it uses plaintext..
