Not so long ago (only a few years - maybe ten years) I forgot my password for, er, a nationwide cycling organisation. I did the usual password reset rigmarole and they sent me an email with my password in it! So it was stored in clear text and sent out over email in clear. I wasn't terribly impressed. I'm sure they've fixed things since.
Edit: Just been through my emails, and it was 10 years ago. It doesn't look quite as bad as I remembered. What they sent me was not the password that I had set, but a temporary regenerated password. However they didn't force me to reset it when I logged in, and it didn't have a limited lifetime - because I got several emails with an identical password over a period of months. So apologies to the un-named nationwide organisation. You weren't quite as bad as I thought 10 years ago.