That message was a scam and has been widely discussed on the forums recently. If you had verified the PGP signature, you'd have seen it wouldn't verify (because it was fake - copied and pasted at the beginning and end of the message). You'll need to start a new account and from there, message Vendor Support to let them know what's going on. I've let the admins know about the situation so hopefully they can freeze your account before too many of your customers get scammed. In the future, please be more careful with your account information - it's your customers who suffer in these situations because they're being scammed and any of them who provided their shipping info unencrypted have now possibly had their sensitive information compromised.