Notification of Temporary Password

[mgehen]

Every couple of months about this time I get a notification "Thank you for your request to obtain a temporary password."  Have not requested it.  When I go into my account, I can't sign in.  So I know someone/some process has changed my password.  Sometimes I can get in by answering the security question.  Today, the security question was changed too so I had to request a new password. Very easy.  Just sent me a new one.  Is this security?   Seems all you need is an account name and email address and gain access to an account.  Seems too easy if you ask me.

I called tech services the first couple of times this happened and they never were able to tell me a thing!