This is definitely worth nothing.. it is one of schemes that scammers use. One can never be too careful.. I do believe that every company that deals with people's data should educate their staf on healthy internet practices because something like this can easily be missed even by the most careful employee which can lead to a security breach.. I think that we should all take time to scan through mails and links even when they are from a legitimate source, you never can tell what is going on at the other side of the computer.