If you haven't done so, I'd recommend you check any credit/debit card accounts immediately to be sure nothing has happened there.
The only time (so far) I've been hit was thanks to a PayPal leak. Fortunately, our credit card company caught it just because it looked suspicious.
It otherwise has all the earmarks of spam at least, and phishing or worse.