I think it's a scam too, I had similar ones recently purporting to be from Hermes, from DPD, from HSBC to name just three.
BUT, if you are in doubt just change your password anyway. IF you would rather leave your password because it's an "easy" one for you to remember, think again and change it!!
Ok, I may be a tad nerdy to some
, but I have 400+ passwords (yes 400). All different and I use a password generator for these - see below. How do I remember these? of course I don't, I keep them on a flash stick and NOT on my computer. A few years ago I took my laptop and flash stick on hols (as normal) but when I got there it was not in my laptop case. Fearing the worse I changed about 100 passwords, those more important than others. When I got back home two weeks later my neighbour gave my my flash stick which he found in the road just behind where my van was
I might add that my stick does NOT contain banking passwords.
Password generator :
clickety-click here
It's not difficult to use and it will tell you how strong your password is - drag slider to chosen number of characters, select whether you want letters, mixed case (upper case / lower case), punctuation characters, numbers - reccommend all of these.
Then click the refresh button (circular with arrows) until you see one you fancy. Then copy it and paste it into your password field on any site.