24hoursloot.com
Online T-Shirt shop in India
plentyoffish.com
Online dating site.
fun fact: PlentyOfFish was advertised in Lady Gaga’s Telephone music video.
terminex.com
Account management web site for a pest control service (behind the login is, among other things, stored billing information).
jango.com
Jango is a customizable streaming radio station service.
They mailed me my original password in plain text when using the “Forgot your password?” feature. And they even brag about it.
yesstyle.com
Fashion shopping website
When requesting my login credentials I was given them in plain text with just a recommendation to change my password. This made me sad, but at least they are VeriSign verified.
sitemeter.com
Website statistics and analytics
After submitting a request for only my password, they sent both my username and password.
blocknews.net
Sells block accounts to access Usenet.
newgrounds.com
Flash games portal
bt.com
As part of setting up a new broadband service, they send both username AND password in the same email. Twice.
Shocking.
nspower.ca
Nova Scotia Power Company
You’d think the only power company in the province would have better security…