Do they provide any other forms of contact? If not, see if you can find people who work there on the internet, and message them.

You're absolutely right, it's a major security risk, and anyone else who discovers it may not be so discreet, and make the company a major target for anyone interested interested in stealing databases with unencrypted databases.

We had the same thing happen 2 weeks ago, worse thing is that the company in our case does things with money. Yep.