Like the email says, the vendor needed access to run a security review. It looked legitimate so gave them my information. You don't think one of our vendors is in on this do you? This is an example of:Key logging Social engineeringSpyware