Users spoofing our company for cyber fraud

Hi, Yes, positive it was a drop box rep. sales.dropboxbusiness.com   It was an email. She scraped a list of our domain names that was being used on dropbox and wants to sell us an admin management console so that we can manage the accounts. Vicki Shen states:

I'm reaching out because our data shows that there are unmanaged users under your domain. Do you need to get control of these users?

- There are currently 84 Dropbox accounts from [Withholding our name]. 

- In the last 6 months we've seen 9 active users from your business. 

- There are currently 163 GBs stored with Dropbox from your team members

Do you have some time Thursday to discuss your account usage and options to keep this data protected?

Best,

Vicki

I stated that we request that our employees don't use dropbox due to security concerns (like this, not being HIPAA compliant, high phishing email references, etc). I requested a list of the 84 account email addresses so that we can verify if any of them are our employees and address the other accounts with Drobbox's cyber security department. She said that the only way she could give me a list of names was to purchase the Admin Console package. I expressed our concerns about cyber fraud and she ghosted me. But... she just replied yesterday so she got wind of my post??? She says that dropbox and references to drop box "have never been linked to cyber criminal activity" which anyone who receives phishing emails knows this isn't correct.

I asked her several times to forward me to someone who can answer questions/help. I realize she is a sales rep and is just spamming people like she is told to do. In my research, I later find out that dropbox doesn't have a cyber security department to address account spoofing and cyber crime being committed using their product. It seems that a company would be able to request a list of everyone using their domain in the account creation process, and, be able to challenge any account that they find may be malicious.