That's bad news, hope the devs give an official statement about this and how they plan on dealing with it
I only received 1 email from them. Can you post the fake email header details? I don't think their email was hacked. Maybe your email is on another mailing list.
In the end, it's your fault if you don't double check everything, their CEO posted a video on Youtube with last 5 digit wallet number. Did you see that video?