I wouldn't trust a cybersecurity company that sends out a multi-use code, even if it's for a 3rd party. While I do understand that this might have been sent by

I wouldn't trust a cybersecurity company that sends out a multi-use code, even if it's for a 3rd party. While I do understand that this might have been sent by a department far removed from IT, it's still scary that they didn't think of possible abuse.