Repercussions for poor password practices?

I registered for my apartment building's tenant portal. Upon completion it sent me an email with my password in it. I visited the site again and realized there was no SSL encryption. I sent an email to complain, and the management company has not admitted that there's anything wrong with this.

I told them that they have an obligation to tell the other tenants that the credentials they used to login to the portal are not secure, but I doubt they'll do anything.

Is there anything I can do to hold them accountable?