Got an email about it that looks legit. Just wondering if someone might have got my user name from a forum post? I went ahead and changed my password. I haven't been on the site in months. Anything else I should do?