It's probably phishing. If there is a link in them to click on, don't. If a website that thinks your personal info is compromised they will tell you to login as you normally do, not send you a link to click on. The link would take you t a legit looking site to "login and change your password" but what it is really doing is just stealing your current username and password so they can access your account.

...or any other form of authentication unless you requested it ahead of time. No reputable company will send such an email. It may look official, but it's not. Period.

Some one wants to reach out and touch you and your bank account.

Yes Milady be very careful of those types of emails.  If you did not request a password change dont even read the email.  I dont, I just delete it.  Sometimes even opening a malicious email can unknowingly allow malware onto your machine.  Usually for truly malicious things like key loggers and viruses you need to actually click the link.  DONT ever do that.  If you have no idea about an email dont let curiosity get to you just get rid of it.  I had one the other day that said "hey Im your new physician"  Yea right, deleted.  Dont fall for it.

even if it is legit (and 99.9999999% of the time, it is NOT legit). Log into the site referenced directly, and check to see if there is truly anything you need to do.