It wasn't for identification. It was for financial purposes so that the collection agency could find the people.

Never the less it's inexcusable to keep such PIs in an open database without encryption and tight controls. I'm sure they allowed anyone in the company to browse peoples personal info so the leaches could go out to suck blood.