Please take a moment to read this brief article about targeted “phishing” scams.  As suggested the takeaway here is always be vigilant when responding to requests for private information.  When in doubt, reach out to be-it@mit.edu for consult.