Private sector organisations using NRIC numbers as authentication or default passwords should stop as soon as possible: Josephine Teo