Considering the fact that their servers are (apparently) easily hacked, providing contact information to the hackers which then used said contact information to send out a phishing attack, the legal course is doing just that. Ignoring it and diverting their messages to the trash will not protect anyone.
V/r,
