Whenever I get an iffy email like that I always do a search to see if it is wide spread.
You can usually find out what the vendor is doing about it from the search.
Then I contact the vendor through their support addy on their web site.
BTW, it's always possible that something on Your Computer sent them the order number.