Account Access Given to Unauthorized User by Support

One of my coworkers (that was not in any way authorized to make changes to our account) called support about updating some of our billing information, and the agent's response was to tell them the account was in my name, reset the password to the account, and then give the user the temporary password.

Thankfully this was one of our employees, but this is extremely concerning - this user was essentially given the information needed to access the account without the approval of anyone on the account.