Opus has answered the question. I would advice that the support people know that a security team exists, she said there was only one department and couldn't transfer me to anyone. They should be able to verify which numbers are legit or not also. And the article pertaining to this event should list the number so that people can crosscheck viability, instead it just says to use the number in the email.
