I mean, it's hardly a phish. It doesn't try to directly link to an action page, and the requested actions are somewhere between "FYI" and "Hey, change your password and strengthen your security".