In my opinion they shouldn't be allowed to ask for PII over email. See here. Not saying Cox is breaking any rules(I am not a lawyer), but they don't seem to be concerned about security. With all the hacks and exploits going on, I wouldn't consider email secure, specially Yahoo email which had one of the biggest hacks of all time. If anything, the data should be encrypted before being sent. With that said, it seems to be the norm with the moderators here(who you are emailing). If you would rather, call Cox and ask for CAG and give them the info, you can do that instead, I just didn't want you to get stuck behind the really bad Tier 1.