Dr. Wife got an email from FedLoan after changing her PIN. The message was only sent in plain-text, and its content (aside from changing her first name) was:
Dear Jane,|| CHR(13) || CHR(10) || CHR(13) || CHR(10) || You're receiving this email to confirm that your Account PIN has been successfully created|| CHR(13) || CHR(10) || with FedLoan Servicing.|| CHR(13) || CHR(10) || CHR(13) || CHR(10) || To keep your Account PIN safe, please:|| CHR(13) || CHR(10) || . Do not write down your Account PIN|| CHR(13) || CHR(10) || . Do not share your Account PIN with anyone else|| CHR(13) || CHR(10) || CHR(13) || CHR(10) || To electronically sign eligible documents with your Account|| CHR(13) || CHR(10) || PIN or to manage your Account PIN, sign into your account at myfedloan.org.|| CHR(13) || CHR(10) || CHR(13) || CHR(10) ||PLEASE DO NOT REPLY TO THIS EMAIL. If you require further assistance, please visit our|| CHR(13) || CHR(10) || website at myfedloan.org. From the homepage, you may click on the "Contact Us" link,|| CHR(13) || CHR(10) || which will provide you with useful information such as our Customer Service Department hours|| CHR(13) || CHR(10) || of operation and telephone number, and will allow you to submit inquiries via a secure e-mail.
Bonus: I got multiple CSRF and database errors setting up this account in order to post this. Yay, Discourse, I guess?