I recently applied to obtain my credit report for the very first time and was taken by surprise when I saw all my credit card numbers mentioned in the report without any masking. I had seen other credit reports in the past (issued by different agencies) which mentioned credit card details without providing the actual card number. Is this an acceptable practice? I am not able to understand the purpose of providing unmasked credit card numbers in the report. Isn't it supposed to contain only metadata which allows lenders to assess my creditworthiness.
A bit of background:
I applied for this credit report online using a third party marketplace which used the services of the rating agency in question. The credit report was immediately made available over email. I am a resident of India and the rating agency in question is a well known global player. The report contained details on all three of my currently held credit cards, all of which are from different service providers.