This email just said "Hello ," in the greeting, so it's probably a spoof. I haven't clicked on any links contained. I have reported it to Paypal.

Still that password change is a little sus? I logged in using the proper Paypal link and my Paypal Id but it would be an ideal way for a spam site to get your bank account / card numbers.  Does anyone know?