Every couple of months about this time I get a notification "Thank you for your request to obtain a temporary password." Have not requested it. When I go into my account, I can't sign in. So I know someone/some process has changed my password. Sometimes I can get in by answering the security question. Today, the security question was changed too so I had to request a new password. Very easy. Just sent me a new one. Is this security? Seems all you need is an account name and email address and gain access to an account. Seems too easy if you ask me.
I called tech services the first couple of times this happened and they never were able to tell me a thing!