Hi,
I would say it's time to let those accounts die!
They are the ones with bad security that is causing issues ... so asking for personal information is inappropriate and out of line.
I would even consider filing a complaint to the state about that.
IF they have a question, they can pick up your phone number and call you to verify the account ... which would be much more appropriate for them to tell you what your information is, than you giving it to them.
Not to mention, that this tells you that folks have access to your account and this is the reason why it is compromised in the first place.
I DO NOT use those services at all ... and never thought they were safe, and they still are the biggest runners of spam and viagra and crap anyone has ever seen, and they won't do anything about it ... and they CAN if they want to ... run a reverse DNS on the mail servers the repeated emails come from and ... half the email gets dumped!
It's even worse to think that Microsoft and Google make so much money and they can not afford a couple of people to take care of the security in these things ... look folks ... it doesn't add up ... and that means these people need to lose some money and accounts until they learn to stop ripping you off!