They asked for a link to the site and the Username to test the problem… NOT the password.
Attempting security questions is the problem here.