Using Social Security Number as Login Usernames: Benefit Resource, Inc

My company uses them for commuter benefit management and I just realized that they use social security numbers as usernames to login to the site. How absolutely bad of an idea is this and how can I get my company to stop using them?