I've had a paypal account for about 10-years now and they have never asked me to change my password.

Only ebay have done that in recent times.

Of course we do change them regularly ourselves as you should.

And NEVER click on links sent in emails even if you think you trust the sender. Some attacks are sent out from email accounts that have been already hacked just to lure you into trusting the source so you will more readily click on any embedded link.