For my investment property, I hired a property management company to manage the property. Since they will be handling my taxes, they needed my SSN. So they asked me to send a copy of my SSN card and other sensitive information through email to them. I declined to do that on multiple occasions due to security reasons and asked if I could send it through standard mail instead. They said I could do whatever that makes me feel safe. So I sent them my information through standard mail. A few days later after they processed my information, they needed my signature. Guess what they did? They sent a freaking email back to me with my SSN and SSN card and drivers license attached everywhere in the PDF attachment. And without any enhanced encryption! Just the default encryption with my email provider. I am wondering if I can pursue any legal action against this property management for mishandling my personal information like this. Thanks!