I have getting variations of this type of email for well over a year now.

I read on Forbes this was caused by a hack and theft of email addresses and passwords from somewhere and posted on some site for downloads. The password mentioned in the email is one I once used and had already changed as part of a routine to change passwords.

So far, no one to my knowledge has actually used the old password to try to get into an account. The scammers are just content to sent these emails. If they get just a couple of suckers to follow through on the scam, easy money.