Password Reset Security Concern
My wife and I called in to have the password for her email account reset. The agent (Will), asked her for her email address and then proceeded to give her a temporary password so that she could log in and reset the password. I then asked him why he did not validate who the caller was before resetting the account. I pointed out to him that with the process that he used, anyone could call in and gain access to someone's email account. I asked him to let me speak to a supervisor. He tried to persuade me that he had everything under control. I informed him that i was no longer interested in discussing this lax process with him, and to please patch me through. He patched me back to the main number, where i requested a call back that i never received. I called back in, this time speaking to Karen. I explained the situation to her and asked her to please forward me to a supervisor. She told me that she placed in a queue, and that i should receive a call within 15 minutes. 1 3/4 hours later, i have still not received a call.
As a network security professional, the process, or lack thereof, used was extremely poor and very dangerous. I would like to speak to someone in management to discuss this