Summary of Issue:
Help Desk was logged into by a unknown person and they used this to get people's emails who created tickets.
They then used our SMTP server to send emails pretending to be udemy to anyone who made a ticket.

The email is not real, there is no need to worry