Is this actually from the company or could it be phishing?
Likely phishing, but using email addresses, a rookie method of account verification.