Sounds like it could be a scam. But good point on where the e-mail came from.
There is a site somewhere that you can type in your e-mail address and it tells you if any sites associated with that e-mail have been hacked.
Something like Have I been pwned or something.