LabCorp review: Using unverified information from lexisnexis that locked me out of my patient portal account

I forgot my password which meant answering questions regarding previous addresses and vehicles owned. Answering truthfully that none of the addresses or vehicles given as choices ever involved me ended up locking me out of my account. I complained and labcorp said I would have to send copies of documents to them before I could access my patient portal. What on earth is labcorp thinking using a third party 'verification' business that is providing unverified info about me (told to me by a lexixnexus employee)? How does that make any sense? At least ask me questions I can provide correct answers for that I have to reverify should I forget my pw again like most companies offer when it involves private personal information! I am contacting my senator and representative regarding this matter to report both labcorp and lexisnexus for using unverified information about me thereby screwing up my life and time spent having to make it right when it should be using verified in in the first place! How is this even legal?