This is due to poor design and could have been avoided. While the "blockchain" does indeed mean that the data is immutable, the actual data you embed within it (and how you choose to do so) is a design decision. Apparently, someone considered it "wise" to embed PII directly into this record when they could have simply embedded IDs and/or encoded/relational data. Very suspect, dubious, and disappointing design.