It was something about retirement accounts
Anyway. About two hours later there was an email from Phish reports saying 1) the HR email was real and 2) Good job everyone reporting it and 3) Please STOP reporting that email since their inbox was getting saturated!!