You would be very surprised at the number of people in management positions at any size company that think this is OK.

At the jobs (consulting and otherwise) I've held in the last few years 75% of the companies stored passwords in plaintext. I'm not justifying it in any way shape or form, but Sony shouldn't be singled out. Until there is an immediate and clear financial incentive to use proper security companies are going to continue to ignore it.