In the past day or so, some people have reported getting an e-mail stating it is from Curse regarding a password reset. The mail looked something like:
Your CurseID password has been reset. To login, simply enter your username or e-mail address and the following password:
We encourage you to change this password as soon as you login.
Your e-mails have not been stolen/hacked, and this was not a fishing attempt. It was a template for the password reset sent by curse, and was sent inadvertently by the bulk mail provider for Curse.
Your passwords have not been reset.