I didn't say break-in, just "security issue". And I would be interested in how responsive their phishing address would be to a case like this simply because the

I didn't say break-in, just "security issue". And I would be interested in how responsive their phishing address would be to a case like this simply because the email is actually from paypal, as was said before, it's just misleading because it looks like Paypal itself is requesting payment. Definitely meets the definition of phishing, but not the most common type of phishing.