Etailer Sent Full Login Details In Welcome Email

[playergaz]

I recently registered for a new account with an on line retailer. When I received the welcome email it included my full login details (user name & password). I had also completed a purchase after registration. Once I had noticed that they had sent my full login details by email I went back in to the website only to discover they had also saved my card details. Therefore if anyone had got hold of the welcome email they would of been able to access my account, change the delivery address & order things using my credit card.
Have they done anything illegal here?

[themas]

No idea whether it is illegal but complain, make sure all your records are removed from the site, & complain to the Information Commissioner. Don't do business with such an incompetent outfit again & make sure they know why.

[Peter Pedant]

well the page to complain at is:

https://ico.org.uk/concerns/

I think they only take electronic complaints and once you are used to it it isnt such a pain
it seems that they are not adhering to the relevant data principles
( there are at least six and I am pretty sure keeping your number ranks as one ) and in view of hacking they should

and yes dont deal with them
and make sure they erase your details

[Peter Pedant]

I think your point is relevant a fortiori - as the lawyers say
considering Wetherspoon have just been hacked

or as Groucho Maarx might have said
would I deal with any firm who had taken my credit card details and beleived them ?