Comment by GraemeL

Ignore it. They got the password from a data breach somewhere.

Change the password on any other site that you use that password for.

Using a password manager makes it much easier to use unique, complex passwords for each site you have a login for.