Spoof HMRC communications - Tax agent blog
...Contact the HMRC security team at, security.custcon@hmrc.gsi.gov.uk, provide brief details of what you disclosed (e.g. name, address, HMRC User ID, password). Do not give your personal details in the email....
