That is very fishy, IMO alarming... Someone has probably gotten a hold of your M+ number, password and has gone far enough to access your personal information.

If I were you, as a precaution, change your password and give United.com technical support a call (800.589.5582) and report the email that you received.

Good luck.