Well, That Was Smart...

Clue Alert: when the company Security Officer sends a company-wide email asking for personally identifying info, don't hit "reply all".