Originally Posted by darksoul

You have no reason to belief they're not encrypted just because they
generated a new one and sent it to you.
The plain text pass its an issue ofcourse and what you should do
is change it imediately.

What worries is me is their way of generating passwords Lddddddd
this is very easy to brute force and they dont have a limit of failed attempts
at least I didn't see it.