Major Security Violation

I requested Bhavay, SPOC from Preplaced to credit back the remaining amount upon cancelling my subscription. To ensure the credit it was observed, my account was logged in by him and received a screenshot on the same for confirmation of the credit. This is a major security violation and was reported to him, and was promised this won't be repeated but this is something basic that an org has to comply with. None apart from the user should be exposed with user credentials! Iys really shocking and disappointing to see such basic privacy and security not handles in such an org! It should be addressed and handled at any cost or I shall report it!