The HR emails really are the worst because they'll say something like "Here's a new employee program. Click here to register" and then people's guard will be down to enter personal info since it's from HR. IT is similar. There should be communication prior to soliciting info/action.