It's looking like it may well be legit, but they singled me out as being allegedly affected when I wasn't in the target group, having changed the password in April last year.

//