
It's not unusual...
I work in the Financial Services/Insurance sector.
A lot of Providers can't handle emails over 5Mb. If you're lucky, you'll get asked to send the data as a password protected .zip...
Some send out CDs that are password protected along with a cover note of "the password is your FSA number". Erm.. If you have the envelope with the company name and address on it, the FSA number isn't hard to find.
The whole thing needs shaking up.