Immediately report suspicious emails to your manager, your IT company (like DilSe.IT), and forward the email to fraud@acehardware.com. Then delete it. If a phone call seems suspicious—especially if someone is requesting remote access or personal information—hang up and contact the company directly using verified contact info.