Looks like CMC has suffered a data breech in October 2021. If you have been getting some random emails recently, this is probably why.
It says that only email addresses have been compromised but if you use the same password on CMC as you do on an exchange, you should change it now.
Also, activate 2FA for both your email account and exchange accounts, preferably one tied to an app or hardware device and not SMS based as SIM swap attacks are on the rise as well.
If you would like to check if your email address is on the list, you can check it on https://haveibeenpwned.com/ by entering your email address. It will show if your email address appears on any of the compromised lists.
Keep your funds safe out there.