Reminds me of a repeated instances with my Human Remains idiots at my former employer, a very large French multinational offering everything from cable ties to data centres.
Every so often we'd get emails requesting personal data. The requests all came out of the blue, always from some kind of outsourcing company specialising in that kind of activity (think managing driver licence ID records, etc). Every time the request email came through its header showed the originating email address fo an outside company, made no reference to my employer, and the only links presented for response or more information were to the websites of outside companies.
The email address and each of the more info etc links were all via different URLs, so different in fact that they could each have been to separate organisations. The emails were often written by someone whose first language was obvously not English. All the indicators of a potential phishing trip, in fact.
I raised the issue with our HR people and IT security people as if it was indeed an outright phishing scam and left it there.
Took ages for anyone to come back to say it was kosher and then only to me.
Nothing ever changed. There was never any corporate announcement to expect these emails and there was no change to the emails themselves
Time after time after time.
The irony was that pretty much each time this happened we'd have had the mandatory IT security refresher not long before.
Glad I'm not there any more
Biting the hand that feeds IT
