More hosting antics (Score 0)

I was rewriting the website for a local police department and needed to get the login information so I could upload my changes. They had long since forgotten the login name and password, so I called the hosting company (I can't remember which one it was) and basically said "Hi, my name is Chris and I am working for the X Police Department. I was wondering if you had the login information because we seem to have misplaced it." The guy on the other line made a few keystrokes and asked if I had a pen. He never checked my identity and I was calling from my cell phone, so he could not have checked the caller ID to see that I was calling from within the department. After trying, unsuccessfully, to login, I called back and asked to double check the username/password and run me through the login procedure. This guy (different from the first) gave me the login info again and gave me step by step directions on how to login. Something is not right with this picture. An individual's website is bad enough, but this is the site for a police department. Imagine if I was malicious. I would be able to do whatever I wanted and may have ruined the reputation of the department.