As a general rule of precaution, don’t follow links in the email. Instead go to the website directly, maybe from a private or incognito instance, and reset it directly. If the email is valid, you’re doing the same thing and if it wasn’t you aren’t drawing attention to anyone else.

It happened to me last year or something. Reset your password and it’ll be fine. It was probably leaked.

Or do the smart thing and stay here instead. :)