Although, in their defense, what do you think most legitimate support emails from actual customers look like? This can't have been far off.

But still, their security process has a hole big enough to drive a truck through.