Computer Help and Support

For a while I added a custom email rule to my mail reader to delete these before I even saw them

In my case, the password was my "myspace.com" password from an account that was closed decades ago.
Myspace was famously hacked and all the passwords have been available on the dark-web for years and years.

Two points I'd like to make:

1) really really use different passwords on each of your services. Don't re-use passwords. So
that when one is stolen, everything isn't lost.

2) the email appeared to come from my real email address, but it was not! It is easy easy easy to generate
email that fakes the "From" field to make it look like the mail was generated from your account (or anyone else's
account). This is an ancient problem that I remember demonstrating to my boss back in about 1978. Without
examining an email in great detail (showing "raw headers" and stuff that is normally hidden), it's really hard to
figure out if email is forged or not. Same thing with caller-id. Easy to fake, don't be fooled.