I’ve been getting about 10-20 of those per day for weeks now. The only passwords they’ve specified were ones I used a LONG time ago so I assumed they’ve hacked a site I haven’t used in a long time and are relying on most people using the same password in lots of places and never changing their passwords.
The past few days I’ve been getting an identically worded e-mail but with a password which I’ve definitely never used. They can be unnerving at first, but you get used to them and end up deleting them without a second thought.
Like all the others, I’m guessing they’ll fade away in a couple of months or so.