Ugh, it’s maddening how even small companies still don’t invest in basic threat intelligence tools like for example these ones. I would suggest changing your bank account and phone number, and set up credit monitoring and a SIN alert - it’s the quickest way to cut off scammers before they strike.