Just a note to add that contact.ba.com and contact.britishairways.com are valid British Airways subdomains. If you have emails from those addresses they will be from BA which is why they know your personal details such as your name and Avios amounts. It's possible that the emails were triggered through fraudulent activity. What was in those emails?