Not sure how this would fool the most adept people, since regardless of what someone says they will never ask you to provide credentials. And when in doubt just

Not sure how this would fool the most adept people, since regardless of what someone says they will never ask you to provide credentials. And when in doubt just contact support directly. Also a red flag would have been them saying account was compromised and downloaded data a week ago. Google wouldnt admit that since could end up on hacker news next day and crash stock. They would wait for person to contact them or resolve quietly.