I understand your concern regarding your own person security but please make sure you're using PGP for all PM's you send, also if a vendor isn't using PGP to contact you regarding sensitive information then simply don't reply until they send it in PGP.