I have received 6 "How to reset your Apple ID password" Email from Apple during the last couple of days, none of which was triggered by me. Could this be related?
I did have the same password for about three years so it didn't seem too odd. Of course I double-checked the url and it looked good. Also I waited for a few days in the hopes that someone else would notice if this was a scam of some sort.
Unfortunately after updating my password I forgot the new one. At least I think I forgot as my new password (as best I can remember it) doesn't work.