It's an auditor, from insurance or some financial service, with a list of 2 or 3 companies, 1 of them being famously invaded since the turn of the century (once, continually).
“It’s a nice IT infrastructure you have at XCorp. Would be a shame if something happened to it”…
Or
“You really don’t want to be the last one in the finger pointing chain. Come on, sign here and you can point to us. Our lawyers will deal with the mess”.
Something like that.