.
That shows poor security. The PIN is not supposed to be stored anywhere. They should hash it with a one-way hashing algorithm and store the hash.
