Why would someone ever respond to unsolicited spam concerning a legal issue from an unverified contact via a third-party social media network.

Even the rather small company I work with would have sent a reminder to everyone to not interact with these messages.

Does sending a personal LinkedIn message to a random employee even count as "contacting the company" in the eyes of the law?