@PJanuszka As always with this sort of email, Don't Panic.
They probably pulled the password from one of the many data breeches that have occurred in the past five years. If it is a password you still use, change it. Do not otherwise interact with the scammer. :)
@Surasanji thanks Dave.