Sure it wasn't someone that you had done a transaction with? Rhey would have access to whatever the "real" info that you gave to PP was.
I try to make it a habit that whenever I get an email like that from EB or PP that I exit out of all of my browsers and then log in to the account. If it is real I will be asked for that info at that time...and I never had.
I did get fooled by a pop up once while I was surfing EB. The login screen appeared and I said to myself WTF I just signed in, but I did it again. I then noticed that it was a popup window, only the top portion (no url window, etc) and the back and forward buttons were both grey meaning it was a new window. I immeadiately changed my ID and password, but that might have redflagged EB to my acct, because in less than 2 weeks I was suspended by being linked to a suspended account of mine from a year back.
| 
