I always thought that passwords are not known to anyone but the person who set it up.

I forgot my password at a specific website and sent the usual "forgot password" email to them (automatic).

I got an email from their customer service (person's name included) informing me of my current password and how to change it.

Is this normal? I guess I'm being naive about some things.

Liz