Poor controls and protection of information on portal

I tried to log onto the portal. Asked for reminder of my username and got an email to the correct email address. Asked for reminder of my password and got a message on the screen saying it was sent to an email sharon.***X I have no idea who this Sharon is and how this email was linked to my account. I called the number given and asked the agent what this was. She said it didn't sound correct and that she would have my account deactivated. I could log a new profile after half an hour. 4 hours later the profile was still active. Surely this is a security breach that could ahve serious consequences. And yet it was not dealt with!