I got the email, warned colleagues (Score 1)

Got the email and was confused - it was very well written, actually was overly well written. Alarm bells started ringing. Then checked the actual links on the text for 'create a new password' and they pointed to educause.[some other domain name].net All the graphics had tracking ids in the URLs which is odd for an alert email. Went to look at the educause website and no warnings of a security problem or need to reset passwords. My guess is their emailing service works great for newsletters, they need to show better links to their website. And put a message on the website confirming it