I received an account for a website, and then changed the password. Then I couldn't log in anymore, so I selected "forgotten password".
I received an email with the password I had set in clear text, but with the last characters missing.
I'm no IT guy, but I think this is bad 🙃