Evaluate the scenario below and indicate how to handle the matter appropriately.
Situation: Michael received an e-mail from what he thought was his doctor’s office, requesting his social security number. Since he had just been in to see his doctor last week, he replied to the e-mail with his social security number.