I recently found out that the Phone company where I have my contract is storing passwords on their server in clear text and employees can access it given the name or contract number of a person.
There is no discussion about that being insecure...
How can I raise my concern on that matter to the company effectively?