They asked for a link to the site and the Username to test the problem… NOT the password.

Attempting security questions is the problem here.