I had this exact email (the wording wasn’t quite the same) and it did indeed have a password I used many years ago. It came from a database breach a few years back. For someone like me reading this email is pretty hilarious, but for less technically inclined people it could be pretty terrifying, especially because it potentially contains an actual password.

It got resent to me 3 or 4 times but I guess they got bored. Surprised me when I got it as I’ve managed to keep my accounts & email pretty secure so far, I very rarely get spam that googles filter lets through.