Is my company storing employee SSNs inappropriately?

Hi. New to this sub.

I recently joined a medium sized company in the IT department. We offer a technology to customers that includes storing customer info such as SSN, address, and phone number. The test environment for this technology is used to store the same information but also includes employees. The entire IT department, about 200 people, can access the test environment and view any coworker’s SSN, address, and phone number. For example, I can go into the environment …

address customer customers cybersecurity department employee employees environment info information joined medium offer phone phone number ssn store technology test