just contact them insecurely. you dont need to hand over sensitive info to tell them their system is broken, right? use an email alias if u like too.
wondering if this is a fluke or if others have experienced this, because i was thinking about trying this vpn sometime