It is not a good idea to send new password in plaintext. Period. They should instead initiate a password reset email and let the user to change their password by clicking a reset link in the email.