What steps do I take? HR sent out my (and all the other employees) information to someone who they THOUGHT was part of our company but it ended up being a scam.