Got it as well and it does look legit. They really should be saying under what circumstances the information was disclosed. Should I be preparing for an onslaught of spam?