lindy.co.uk
Computer and audiovisual connectivity
They sell through their own online and mail-order business and elsewhere and store your password in plain text.
exileservers.com
Game server hosting
This is the email sent after registering.
zap2it.com
TV listings
Sends your password in plain text as part of the registration process
oneshare.com
Stocks
OneShare sends the password you had when clicking “forget password”
thomas-sports.com
Parachute equipment
They send you your password in plaintext after you register. On the plus side, they don’t send you your plaintext password if you click on the forgot password link, so maybe they don’t store it in plaintext.
cityofsacramento.org, i-doxs.net
City government
Oh, and worst of all they have tolower() all of their passwords!!! (no I am no joking).
Editor’s Note: This is not the first i-doxs.net website we’ve seen. Looks like they provide sites for a few city departments at least in California, USA.
thaipod101.com
Language learning
They keep sending me my password as plain text when I didn’t even request it… just sending it as part of their standard marketing emails.
mono-software.com
Software company
Their MonoX CMS stores user passwords in plaintext for any Admin user to view & edit
Editor’s Note: This is not a site, but a software product that stores passwords in plaintext. If you know of any websites currently using this product, please let us know in the comments.
textbookrush.com
Textbooks
On the “forgot password?” form, the site says:
Note: For security purposes we cannot send your original password.
A randomly generated password will be emailed to you.
No prompt to change the password once logged in with the new site-generated one.
brewersassociation.org
Trade group
They have emails and password of about 40,000 homebrewers and a couple thousand professional craft breweries.
