Fewer than half (42%) of vulnerable customers have disclosed their personal circumstances to firms, according to the City regulator.