Aside from requesting my information to be removed, what other actions should I take for this company?

I was trying to get a password reset (can't remember the email I used) at a local job staffing company I had previously used years ago and the whole conversation went something like this:

Me: Hi, I'm trying to get into my account for your services and can't remember my email or password.

Her: What's the name?

Me: First name , Last name.

Her: Okay, you're username is "" and your password is "".

Me: Okay, thank you.

.............................................................................

WTF? …

information privacy