It's just spam, everyone gets those. It's frankly irresponsible that they spent money chasing this down. They've been sending these out for years now and you'd think everyone knew about these by now.
The emails usually feature a known (hopefully old) password, and they get that one from public data breaches (you can look up your email on haveibeenpwned.com and see which breaches it's been featured in).
The only thing this IT team should've done is send out an educational email to all employees explaining that:
- it's spam
- there's no video, don't worry about that
- do not under any circumstances send Bitcoin
- if the email has a password in it, and you still use that password somewhere, change it immediately and never use it again. If it's your dog's name, unfortunately you'll have to rename your dog.