Should I be worried?

[Tesla]

hi all

 

signed up to a site a few months ago (it's a sign up for offers off a website that sells software to schools)

 

forgot my password (shame on me), clicked forgot password, was sent an email like this

 

 

obviously the password was sent to me in a plain text email, am i overeacting, or should i query this with them?

[localzuk]

This is evidence that passwords are stored in either simple reversible encrypted form in their database, or in plain text. I'd complain, and if they are a UK firm, also complain to the ICO.

[Tesla]

Their "global headquarters" is in the UK but they are based worldwide, should i take this to assume that they are indeed a UK company?

[gtg93]

As above, something isn't right... No one should know or be able to figure out your password but you.

 

I'd guess they're UK based if that's where they're saying their "headquarters" are, but either way I'd be complaining...

 

Name and shame??

[Tesla]

Not naming and shaming yet... originally had another issue as nothing happened when I clicked forgot password. I asked about it to the acclunt manager and they said theyd look up my password and let me know. I then later got an emaik saying she couldnt access my password but had reset it (which is what id expexted theyd do anyway) But during that time id got email through from my originals click (s) on the forgot password link.

[Tesla]

Excuse typos. On phone app

[bobt]

BBC News - Tesco web security 'flaw' probed by UK data watchdog

 

Surprising number of firms are still doing this. Definitely complain to ICO.

[Tesla]

Went on ico website, suggests i try to converse with said company, so am going down that path now

[free780]

I've had this with a few things.