I get things like this from "Paypal," "Ebay," and several banks (most of which I don't have an account at, but when you're "phishing," just a small percentage of people have to take the bait for you to have a good day ( "phishing" is when some unscrupulous individual tries to get your personal information, like credit card number, social security number, passwords, etc., by sending fake messages like this. Then they can use your info, or even try to steal your identity).
The first time I got one of these, I thought it was legit and was going to respond. I couldn't get on the site (luckily) and then read about "phishing" on VF, so I was saved from divulging my info.
I recently got something similar from our "tech administrator," that stated that an attempt had been made to send numerous emails from my account that were not legitimate (ie: someone was using my email account without my knowledge), and that I had to verify my passwords, etc., and change them, or my email account would be suspended. It sounded pretty legit, except for the fact that I really doubt that the university would suspend a faculty member's email account for any reason (other than severe criminal acts, or something to that effect). The next day, we received a legit email from the real administration office, saying that these were bogus messages sent to faculty, intended to make us divulge our personal info.