I almost fell for the same thing with Earthlink - got an URGENT e-mail saying their servers had crashed and wiped out all member and billing info, so would I please click on the link included and resubmit the usual stuff, plus my birthday, mother's maiden name, Social Security number, past address, etc., etc.
Needless to say, that message got an ESAD response. One clue was to look up the domain name, it was for someplace in Utah, Earthlink's offices aren't there!