Sending plaintext password even though the customer complains?

www.comhem.se (owned by tele2) has been sending plain text password from a third-party domain with no encryption for several years. their management don't even change it when we file a complaint. after writing to a newspaper they recently published an article about it but the company still denies doing it wrong...https://computersweden.idg.se/2.2683/1.722651/com-hem-losenord-klartext

GDPR is implemented in Sweden but only for sham purposes like everything else here, the laws look good on paper but then reality is completely different