This is very dodgy on their part. Personal tax details should not leak out from the finance department.

In small companies this does mean people have to operate with internal Chinese walls in their heads.