Email is definately not a good way to send any time of data but unfortunately there are lots of firms that still send CC and SS numbers via unencrypted email. Sending it in a encrypted and compressed archive with password authentication to deflate the file would be better, but still not a 100% great solution.