Comment by ddlatham

They are not necessarily storing the password in plaintext. However, they are:

1. Storing it in a recoverable format, instead of a format that only allows verification.

2. Emailing them in plain text.

Both of which are bad.