I didn't get an email. It's circumstantial evidence.
1.) In order to change a username/password combination on a third party site you need to have a verified email address.
2.) Perpetrator has my email address for the third party website.
3.) Perpetrator does not have a password, they click on forgot password.
4.) Third party sends a confirmation code to my email address.
5.) Perpetrator has access to my email and uses the code sent along by the third party to reset username and password on third party website.
Thanks for visiting Amazon.com! Per your request, we have changed the e-mail address associated with your account
The e-mail address associated with your account has been changed. The old address was xxxxxxxxxxxxx The new address is zhang90155zhao3011@163.com.
Visit Your Account at Amazon.com to view your orders, make changes to any order that hasn't yet entered the shipping process, update your subscriptions, and much more.
Should you need to contact us for any reason, please know that we can give out order information only to the name and e-mail address associated with your account.
Thanks again for shopping with us.