When I read their reply this morning, I remembered why my brain had censored this password:
The ID (or login) is my social security number.
The password is my account number, given by this company, and written on EVERY documents and cards they issue!
(and probably transmitted to many other organizations, doctors, etc.)
Or course, once connected on their web site, there's no way to change your password!
This site is "read only", it is only listing past reimbursements (dates, amounts, and bank account numbers). But this is still health related information.
How is this possible in 2014?
This world is more and more like a kind of hell.