It's legit. Actually had a fraudulent charge on my Chase card today from a jail phone operator in a southern state.
Only have a couple of recurring bills with the card and don't generally use it at stores, so I'm pretty confident that it was due to the breach at Chase. My biggest concern is someone using the other information they stole to open accounts under my name.