I received the same email. Logged in (not using the link in the email but the regular website) and recovered my PIN.
Got the email with the new pin. It was a 3 digit number.
The website requires 4 digits.

Emailed ambassador@....
Got an response after around 1 day that they would reset my pin and email me.
Gut that email. Same 3 digit pin again.....

Seems they take security really serious. Nobody can log into my account, not even me.