In my case they mailed me a piece of paper with an access code on it, which led to a site with an encrypted PDF containing my report. The password to the PDF was the same as the access code I got.