I was sent an email today (the email did land in spam folder) from this person stating they found some vulnerabilities and after asking what they were, they replied back with a list.

I'm unsure if it's an automated email, or if it's a scammer, but it may be worth it for someone from IPS to look into? Who do I contact for this?

I have created a ticket for you to reply back with any private information which you wish to pass on to us from this. You should have received an email to the address on file for your account.