Paul, informing people of this type of activity is a good thing to do.
Changing passwords and even emails is a good thing to do.
I became aware of the issue reading online.
Through the article, they included info advising to check on haveibeenpwned.<<phishers
Remember that that hackers use...