Whilst on the phone to support staff (about billing) to Virgin Media, perhaps the largest ISP and telecoms company in the UK, I was asked to confirm my password over the phone.
I asked the advisor if they could see my password in plain text, and they said they can!
I am currently wondering what the best course of action is for me to bring this issue to the attention of Virgin Media's management. The fact that any call center worker could go home and access my Facebook account is bad enough, but if the passwords are stored in plaintext, Virgin Media is sitting on an information security timebomb and all their customers are at risk.
How do I get Virgin Media to handle passwords securely?