Well, for the time being no one can access SR anyway. And if you've provided your info to a phishing site, there's really nothing that SR Support can do for you anyway -- you would just need to change your password and your PIN.