purplecape - 9:13 pm on Oct 20, 2009 (gmt 0)

Re the phished email response--I really do think that's a reasonable reply, since there are a lot of people who might contact them to find out whether a particular email IS a phishing email or is legit. Was there something else they should have said?

You can assume they made use of the email internally.