A friend of mine damaged his card. The PO said they would issue a new one. They sent him a new PIN - which was in fact his current PIN (the usual method of being hidden under a paper scratch off flap)
I have never seen that before: would that not be considered a security error of some sort? It certainly seems to me to be bad practice.
It only took him six weeks to get the card!! - he is a pensioner - with his pension paid in to the account. They said that they had no emergency procedure to let him access his money - he had to wait until the card turned up !! He could not even go in to a PO with his damaged card and proof of ID to get some money. You will not be surprised to find that he is closing the account.