We take the security of your account very seriously and want to assure you that securing the data you have entrusted us with is of utmost importance to us. Our password reset process asks for either User ID or Email address as its first step, this can allow for customers to inadvertently type a user id or email address that is similar to their own or one they believe is their own. Once the login information is entered, as part of the next step, a request is sent to the email address attached to the account. I would ask that you please sign into your account to verify everything is OK
Please see this FAQ for more information:
https://ttlc.intuit.com/replies/5749946
