I just logged on to my wife's account ... they wanted last 4 of SSN, dob, and account number, by which I assume they mean her credit card number. Of course I don't have on hand her card number, and as I think about it, this sure looks phishy. Will probably call in, pay off whatever is due, and then stop using card.
FWIW, was able from same computer to log into my accounts.