Ok this is my concern.....not the content but the fact they have a password i use.I use a different email address for every website I register on, and it contains the website name, so it definitely came from there.
But...
Not to say other sites haven't been hacked and emails added to the list.
No password on the one I received.
That said it could be they have a harvested millions of emails and sent out a phishing email.