@jennyreineck You are right to be suspicious if you did not trigger the email.
I think you are already proceeding wisely, but please do not engage with any unexpected email that asks for personal information or to set up a password.
Okay - I checked and everyone on my team that uses Khoros received this email. It didn't ask for personal info or to set up a password but it asked to click to confirm my email.
Does this mean that our email addresses were obtained during the hack and are now being used to try to set up other accounts? Any insight into why we all received this email now?