So this looks like HR or someone from inside snapchat got a phishing email and happily obliged and sent off a bunch of sensitive information without confirming that it should all be shipped over (unsecure) email.<p>I do work for some higher ed institutions, and almost every year without fail we have seen (and dealt with) successful phish attempts of various staff members... it&#x27;s usually something small like a credit card number, but it still amazes me how an email that may look &quot;very suspicious&quot; to me doesn&#x27;t set of a flag for someone else who isn&#x27;t really thinking about this type of attack.